python-mt5

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the MetaTrader5 library from PyPI, which is the standard library for programmatic interaction with MetaTrader 5 terminals.
  • [COMMAND_EXECUTION]: Includes utility scripts such as calc_margin.py, check_connection.py, and export_rates.py that execute within the user's environment to perform account diagnostics and data management tasks.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external financial market data (OHLC rates and ticks) from the MetaTrader 5 platform.
  • Ingestion points: Data is retrieved via API calls like copy_rates_from and copy_ticks_from within scripts and examples.
  • Boundary markers: Not implemented; the skill assumes the integrity of the data provided by the connected MT5 terminal.
  • Capability inventory: The skill enables trade execution via order_send and local file creation via export_rates.py.
  • Sanitization: Market data is typically retrieved as structured numeric data (numpy arrays), reducing the risk of natural language injection.
  • [SAFE]: Code examples and instructions use placeholders (e.g., "xxx") for sensitive information such as account passwords, adhering to secure documentation practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 07:52 AM