storyclaw-alpaca-trading

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a trading integration using the Alpaca API (a brokerage API) with support for real trading (not just simulation). It requires per-user API keys/secrets, exposes commands to place market buy/sell orders, manage positions, and switch to live baseUrl for real trading. Those are specific financial-execution capabilities (placing market orders, managing real trading credentials), so it grants Direct Financial Execution Authority despite listed safeguards.