alpaca-data
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill correctly uses environment variables (
APCA_API_KEY_ID,APCA_API_SECRET_KEY) for authentication, adhering to secure secret management practices. It includes explicit warnings against hardcoding credentials in shared code. - [SAFE]: Network operations in the provided scripts are exclusively directed to official Alpaca API endpoints (
data.alpaca.markets). Alpaca is an established and well-known financial services provider. - [SAFE]: The skill utilizes the official Python SDK (
alpaca-py) and standard data processing libraries (pandas,requests). No unverifiable or suspicious dependencies are introduced. - [DATA_INGESTION]: The skill processes external market data, including news and price bars. While this represents a standard data ingestion surface for an AI agent, it is handled via structured requests to a trusted financial data provider, posing minimal risk of indirect prompt injection.
Audit Metadata