openalgo
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements robust security controls for financial automation tasks.
- Credential Management: The skill centralizes configuration using
.envfiles via thepython-dotenvlibrary. TheSKILL.mdexplicitly mandates the use of environment variables and includes a safety rule to reject scripts with hardcoded 64-character hex keys. - Execution Safety: It provides an 'Analyzer' mode (sandbox) that simulates broker responses without executing live trades. Safety rules also require explicit user confirmation for live orders and validate lot-size multiples against bundled asset data before placement.
- Data Handling: Market data is fetched from a unified REST/WebSocket interface. Local data storage via DuckDB (Historify) is accessed using parameterized SQL queries to maintain data integrity.
- Outbound Communication: Alerts to Telegram and WhatsApp are used for strategy notifications (order fills, P&L summaries). These are documented as user-configured features for outbound reporting.
- Software Supply Chain: All dependencies are well-known, industry-standard libraries for data science and finance, including
pandas,vectorbt,TA-Lib, andduckdb.
Audit Metadata