algo-trading

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill details building, backtesting, and executing live trading systems, including placing orders via exchange APIs (exchange.create_order at SKILL.md:155). This constitutes a direct financial operation (trading/settlement authorization). Although exchange APIs require authentication credentials (API keys) managed externally by the user or SDK, there is no documented independent access control enforced by the execution layer or skill itself (e.g., secondary approval, independent pre-trade risk check validation by a separate service). Therefore, it falls under High severity due to direct financial operations without qualifying independent access control.