openalgo

SUSPICIOUS. The skill is purpose-aligned and mostly uses official OpenAlgo/PyPI paths, but it enables high-impact autonomous trading and messaging actions and includes under-specified dependency installation. Data flows are coherent with a self-hosted trading platform, so this is not confirmed malware, but it carries substantial operational and security risk.

The fragment is an automated options-trading script with legitimate-looking broker API, journaling, and notification behavior. It contains no clear malicious or data-theft behavior. It does create significant financial and operational risk because it places live market orders, modifies import resolution, and lacks robust cancellation and reconciliation for partial failures or timeout cases.

The fragment is a portfolio rebalancing utility with explicit interactive confirmation, local journaling, broker API order submission, and Telegram notification. It contains no clear indicators of malware, credential theft, obfuscation, or unauthorized persistence. It does perform high-impact financial operations and has calculation and input-validation weaknesses, particularly the unfiltered holdings-value calculation and lack of explicit positive-LTP validation. Assessment of imported helper modules is outside the supplied fragment.

The fragment is a readable trading execution script that intentionally places two option orders and configures stop-loss handling. It contains no direct evidence of malware or unauthorized data theft. It does present a material operational risk because it can place live trades, send execution alerts, and leave an unhedged or partially executed CE leg if the PE leg fails. Review of get_client(), enter_options_atm_with_sl(), open_journal(), and alert implementations is required to assess their network, credential, and order-handling behavior.