trader-broker
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the official Alpaca MCP server and the Interactive Brokers verified connector. These are established tools provided by well-known financial organizations.
- [SAFE]: Implements a robust 'three-gate' authorization workflow, requiring an automated risk check, a verbatim user confirmation in the chat, and a platform-level permission grant before any trade is executed.
- [SAFE]: Strictly enforces credential hygiene by directing users to manage API keys through secure local configuration or environment variables, with specific instructions to never expose secrets in the chat context.
- [SAFE]: The included
ticket.pyutility handles order rendering and approval logging locally using only the Python standard library, performing no network operations or external data exfiltration. - [SAFE]: Employs explicit validation logic to ensure user approvals are intentional and specific, checking the confirmation text against order details like symbol and quantity to prevent accidental execution.
Audit Metadata