tigeropen-java

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill provides a complete set of tools for placing orders, executing trades, and managing accounts via the Tiger Brokers API (including live trading capabilities), which constitutes a direct financial operation (trading/purchasing/settlement authorization). Although authentication is used via ClientConfig and private keys (SKILL.md:51-54), API credential configuration or client-side keys do not constitute an independent service-enforced access check gating the financial route itself, meaning no qualifying independent control is established for direct trading routes.