finlab
Warn
Audited by Snyk on Apr 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for quantitative trading and includes live order execution APIs. The "Execute Orders (Optional)" section shows concrete functions/classes for converting backtest reports to live positions, connecting a broker account (SinopacAccount), creating orders with OrderExecutor, previewing orders (view_only=True) and then executing them via executor.create_orders(). Those are specific broker-integration/order-sending capabilities (i.e., sending transactions to execute trades), so this grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata