alpaca-cli
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the CLI tool from the official AlpacaHQ GitHub repository using 'go install'.
- [COMMAND_EXECUTION]: The skill uses local shell commands to interact with the Alpaca API for trading and data retrieval.
- [CREDENTIALS_UNSAFE]: The skill guides the user to manage API credentials securely through environment variables and local configuration files with restricted permissions, specifically warning against practices that leak secrets into shell history.
Audit Metadata