ib-trailing-stop
Warn
Audited by Snyk on Jun 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to place and manage live trading orders via Interactive Brokers (TWS/IB Gateway). It references IB ports (7496/7497), has an --execute mode that "cancel[s] orphan TS_ orders + place[s] new TS_ TRAIL orders", and implements data-layer functions named _place_simple_trail_order, _cancel_orphan_orders, and _execute_position_trail. The JSON output and report include order_id/order_ref and per-position "action" values that trigger creating or replacing TRAIL orders. These are direct market/trading operations against brokerage APIs (IBKR), not generic tooling, so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata