longbridge-market-data

Warn

Audited by Snyk on Jul 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill exposes an explicit "ipo orders" command (listed under IPO commands) and "ipo profit-loss", and the auth requirements state that "ipo orders" and "ipo profit-loss" require longbridge auth login with Trade permission. The presence of a specific CLI command to place IPO orders (and the trade-permission requirement) indicates the skill can execute financial transactions, not merely read market data. Therefore it provides direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 5, 2026, 09:38 AM
Issues
1
Security Audit — snyk — longbridge-market-data