ib-stop-loss
Warn
Audited by Snyk on May 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly built to manage and place broker orders via Interactive Brokers (requires TWS/IB Gateway on trading ports). It defines execute modes (
--execute,--forced) that cancel orphan orders and place conditional stop-loss orders, including atomic combo (BAG) orders for PMCC and single stop orders for LEAPS or stock. The code-level entry points and functions (_place_combo_stop_order, _place_simple_stop_order, _execute_position_stop, _cancel_orphan_orders) are clearly for sending/cancelling live trading orders rather than generic analytics. Even though dry-run is the default, the documented execution paths provide direct financial execution capability through a payment/trading API (IBKR).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata