wolverine-strategy
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/wolverine_config.pymodule executes themcporterCLI tool using thesubprocess.runfunction. This tool is used to interact with the trading platform's API for retrieving market data and managing positions. The commands are passed as an argument list (rather than a shell string), which is a standard security practice to prevent command injection. - [EXTERNAL_DOWNLOADS]: The skill's setup documentation provides
curlcommands to download its core components (scripts, configuration, and metadata) from theSenpi-aiGitHub organization. These downloads are legitimate as they originate from the verified source of the skill's author. - [SAFE]: The skill manages its operational state, such as trade counters and cooldown periods, using local JSON files in the
state/directory. This approach ensures that trade history and strategy states are preserved locally without the need for external network calls or database exposure.
Audit Metadata