longbridge-market-data
Warn
Audited by Snyk on Jul 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill exposes an explicit "ipo orders" command (listed under IPO commands) and "ipo profit-loss", and the auth requirements state that "ipo orders" and "ipo profit-loss" require
longbridge auth loginwith Trade permission. The presence of a specific CLI command to place IPO orders (and the trade-permission requirement) indicates the skill can execute financial transactions, not merely read market data. Therefore it provides direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata