rebalancing

Warn

Audited by Snyk on Mar 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly covers generating trade lists and executing them. It instructs workflows to "Submit the approved trade list through the order management system", perform "block trades", "Confirm fills and reconcile actual vs intended post-rebalance weights", and otherwise directs selling/buying assets across accounts (including cross-account optimization). These are clear instructions to place market trades / execute orders (buying/selling assets), which match "Market Orders (Buying/Selling stocks or assets)" in the Core Rule. Even though no specific third‑party payment processor names appear, the skill's primary and explicit purpose is to generate and execute financial trades, so it grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 19, 2026, 11:45 PM
Issues
1