longbridge
Warn
Audited by Snyk on Jul 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes account and trading capabilities: it documents an auth mode "longbridge auth login --trade" for portfolio and account features, notes "portfolio and account features require login with Trade scope", and describes "order-related features follow a preview + confirm two-step protocol" and an "account write scope" (the doc says it's read-only by default unless using account write scope). Those statements indicate the skill can perform market orders / account write actions (i.e., execute trades) when authorized, which is direct financial execution.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata