alpaca-cli-regenerate
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches OpenAPI specification files from
docs.alpaca.marketsvia themake spec-updatecommand. This is the official documentation portal for the vendor (Alpaca) and is used for legitimate synchronization purposes. - [COMMAND_EXECUTION]: The skill provides instructions for the agent to run various development commands, including
make,go test, andgit diff. These are standard tools used within the intended scope of maintaining the project code. - [REMOTE_CODE_EXECUTION]: The code generation phase (
make generate) runs a local Go program (go run ./cmd/generate) that processes the downloaded specifications. This is a common pattern in Go-based development for creating type-safe API clients. - [DATA_EXFILTRATION]: While integration tests are mentioned as requiring API keys, there are no instructions provided that would lead to the improper handling or exfiltration of these credentials.
Audit Metadata