algo-risk-test
Warn
Audited by Snyk on Apr 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed for trading and order execution. It embeds a trading client (from openalgo.api), calls trading-related endpoints (client.analyzerstatus(), client.positionbook()), and describes injecting synthetic price moves via client.placeorder() to affect LTP. The docs also reference the risk manager issuing placesmartorder(position_size=0) to flatten positions and warn that disabling sandbox will cause real broker orders to fire. This is a purpose-built interface to place and validate market orders (i.e., move money/positions), not a generic tool, so it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata