trader-broker

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the official Alpaca MCP server and the Interactive Brokers verified connector. These are established tools provided by well-known financial organizations.
  • [SAFE]: Implements a robust 'three-gate' authorization workflow, requiring an automated risk check, a verbatim user confirmation in the chat, and a platform-level permission grant before any trade is executed.
  • [SAFE]: Strictly enforces credential hygiene by directing users to manage API keys through secure local configuration or environment variables, with specific instructions to never expose secrets in the chat context.
  • [SAFE]: The included ticket.py utility handles order rendering and approval logging locally using only the Python standard library, performing no network operations or external data exfiltration.
  • [SAFE]: Employs explicit validation logic to ensure user approvals are intentional and specific, checking the confirmation text against order details like symbol and quantity to prevent accidental execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 12:13 PM