ib-find-short-roll

Warn

Audited by Snyk on Mar 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly built to interact with Interactive Brokers (TWS / IB Gateway) with separate ports for paper and live trading and uses an IB client library (ib-async). Its purpose is to analyze existing positions and find/construct option trades (rolls, covered calls/puts, spreads) and returns fields like buy_to_close, roll_candidates, and recommended position/credit/debit. Interactive Brokers is a brokerage API used to place market orders and manage accounts, and the skill’s primary domain is generating trade actions (open/roll/close option positions). Under the decision logic, this is a tool whose primary and explicit definition is to operate on market orders and therefore to move money.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 1, 2026, 01:21 AM