ib-find-short-roll
Warn
Audited by Snyk on May 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly built to interact with Interactive Brokers (TWS / IB Gateway) with separate ports for paper and live trading and uses an IB client library (ib-async). Its purpose is to analyze existing positions and find/construct option trades (rolls, covered calls/puts, spreads) and returns fields like
buy_to_close,roll_candidates, and recommended position/credit/debit. Interactive Brokers is a brokerage API used to place market orders and manage accounts, and the skill’s primary domain is generating trade actions (open/roll/close option positions). Under the decision logic, this is a tool whose primary and explicit definition is to operate on market orders and therefore to move money.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata