us-stock-trading

SUSPICIOUS: the Alpaca SDK install path is legitimate, but the skill hardcodes plaintext API credentials, permits autonomous trading actions, and exposes portfolio data through WeChat and a public HTTP dashboard. Its actual footprint is broader and riskier than a narrowly scoped paper-trading helper.