python-mt5
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
MetaTrader5library from PyPI, which is the standard library for programmatic interaction with MetaTrader 5 terminals. - [COMMAND_EXECUTION]: Includes utility scripts such as
calc_margin.py,check_connection.py, andexport_rates.pythat execute within the user's environment to perform account diagnostics and data management tasks. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external financial market data (OHLC rates and ticks) from the MetaTrader 5 platform.
- Ingestion points: Data is retrieved via API calls like
copy_rates_fromandcopy_ticks_fromwithin scripts and examples. - Boundary markers: Not implemented; the skill assumes the integrity of the data provided by the connected MT5 terminal.
- Capability inventory: The skill enables trade execution via
order_sendand local file creation viaexport_rates.py. - Sanitization: Market data is typically retrieved as structured numeric data (numpy arrays), reducing the risk of natural language injection.
- [SAFE]: Code examples and instructions use placeholders (e.g., "xxx") for sensitive information such as account passwords, adhering to secure documentation practices.
Audit Metadata