alpaca-trading-mcp
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's installation instructions include downloading the uv package manager installer from astral.sh, which is recognized as a well-known and established service for Python development tools.
- [COMMAND_EXECUTION]: The skill provides configuration examples that use the uvx tool to download and run the alpaca-mcp-server package directly from a package registry.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection due to its ingestion of external market news and corporate action data, which could potentially contain malicious instructions. 1. Ingestion points: The get_news, get_crypto_news, and get_corporate_actions_announcements tools defined in SKILL.md. 2. Boundary markers: None identified in the provided instructions. 3. Capability inventory: Includes high-privilege operations such as placing trades (post_orders) and closing positions (delete_positions_by_symbol_or_asset_id). 4. Sanitization: No specific sanitization or filtering logic for external data is mentioned.
Audit Metadata