wolverine-strategy

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/wolverine_config.py module executes the mcporter CLI tool using the subprocess.run function. This tool is used to interact with the trading platform's API for retrieving market data and managing positions. The commands are passed as an argument list (rather than a shell string), which is a standard security practice to prevent command injection.
  • [EXTERNAL_DOWNLOADS]: The skill's setup documentation provides curl commands to download its core components (scripts, configuration, and metadata) from the Senpi-ai GitHub organization. These downloads are legitimate as they originate from the verified source of the skill's author.
  • [SAFE]: The skill manages its operational state, such as trade counters and cooldown periods, using local JSON files in the state/ directory. This approach ensures that trade history and strategy states are preserved locally without the need for external network calls or database exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 10:52 AM