alpaca
Warn
Audited by Snyk on Aug 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a dedicated connector to the Alpaca Trading API and explicitly exposes trading functions: placing, replacing, and canceling orders; closing/liquidating positions; exercising options; and other order management operations. It also documents auth and configuration for live trading (with explicit opt-in). These are direct financial execution capabilities (placing market/limit/stop orders and managing positions), not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata