mql-developer
Warn
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The reference material provides code examples for importing and utilizing external Windows DLLs (e.g.,
kernel32.dll,user32.dll) and Named Pipes. These techniques enable code execution outside the MetaTrader sandbox, allowing interaction with the host operating system's API and other local processes. - [DATA_EXFILTRATION]: The skill contains multiple templates and instructions for transmitting sensitive account metadata (e.g., account login numbers, balances, equity, and real-time trade transactions) to external servers using the
WebRequestfunction. While presented for trade logging and license validation, these patterns represent a potential data exfiltration vector if the target URL is redirected to a malicious endpoint. - [COMMAND_EXECUTION]: Demonstrates Inter-Process Communication (IPC) via Windows Named Pipes using imported system DLL functions, which can be leveraged to share data or trigger actions in other applications running on the host system.
Audit Metadata