ib-find-short-roll
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly built to interact with Interactive Brokers (TWS / IB Gateway) with separate ports for paper and live trading and uses an IB client library (ib-async). Its purpose is to analyze existing positions and find/construct option trades (rolls, covered calls/puts, spreads) and returns fields like
buy_to_close,roll_candidates, and recommended position/credit/debit. Interactive Brokers is a brokerage API used to place market orders and manage accounts, and the skill’s primary domain is generating trade actions (open/roll/close option positions). Under the decision logic, this is a tool whose primary and explicit definition is to operate on market orders and therefore to move money.
Audit Metadata