algo-expert

Warn

Audited by Snyk on Apr 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly built around live order execution via the OpenAlgo SDK. It names SDK methods that send orders (client.placeorder(), client.placesmartorder(), client.optionsmultiorder(), client.optionsorder()), describes execution types (MARKET, LIMIT, broker-side SL-M trigger), and gives live-vs-sandbox toggles and order-placement idioms (flattening positions, multi-leg options entry, fetching quotes before orders). These are specific, purpose-built trading APIs to send market/options orders — i.e., direct financial execution — not generic tooling.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 26, 2026, 10:07 PM
Issues
1