alpaca-trading-hardened

SUSPICIOUS: the skill is coherent and not obviously malicious, but it gives an AI agent high-impact financial trading capability and routes sensitive trading credentials through a third-party CLI. The main issue is autonomous real-world action risk, with moderate supply-chain risk from relying on non-official Alpaca tooling.