openalgo

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements robust security controls for financial automation tasks.
  • Credential Management: The skill centralizes configuration using .env files via the python-dotenv library. The SKILL.md explicitly mandates the use of environment variables and includes a safety rule to reject scripts with hardcoded 64-character hex keys.
  • Execution Safety: It provides an 'Analyzer' mode (sandbox) that simulates broker responses without executing live trades. Safety rules also require explicit user confirmation for live orders and validate lot-size multiples against bundled asset data before placement.
  • Data Handling: Market data is fetched from a unified REST/WebSocket interface. Local data storage via DuckDB (Historify) is accessed using parameterized SQL queries to maintain data integrity.
  • Outbound Communication: Alerts to Telegram and WhatsApp are used for strategy notifications (order fills, P&L summaries). These are documented as user-configured features for outbound reporting.
  • Software Supply Chain: All dependencies are well-known, industry-standard libraries for data science and finance, including pandas, vectorbt, TA-Lib, and duckdb.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:58 PM