ib-stop-loss

Warn

Audited by Snyk on May 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly built to manage and place broker orders via Interactive Brokers (requires TWS/IB Gateway on trading ports). It defines execute modes (--execute, --forced) that cancel orphan orders and place conditional stop-loss orders, including atomic combo (BAG) orders for PMCC and single stop orders for LEAPS or stock. The code-level entry points and functions (_place_combo_stop_order, _place_simple_stop_order, _execute_position_stop, _cancel_orphan_orders) are clearly for sending/cancelling live trading orders rather than generic analytics. Even though dry-run is the default, the documented execution paths provide direct financial execution capability through a payment/trading API (IBKR).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 14, 2026, 07:59 AM
Issues
1