ctrader-cli
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by the vendor of the cTrader platform and provides a technical interface to their official CLI tool. The instructions are focused on operational efficiency and security best practices for automated trading environments.- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute ctrader-cli.exe. Commands are explicitly bounded by timeout (e.g., timeout 30) and use stdin redirection (</dev/null) to prevent interactive hangs. Output is redirected to temporary files (1>out.txt 2>err.txt) to avoid clobbering data in concurrent sessions.- [SAFE]: The skill implements a critical 'authorization gate' for state-changing trading commands (e.g., order place-market, position modify). It requires the agent to obtain explicit user authorization for every specific action and to verify the account is a demo account (Live: false) before execution.- [EXTERNAL_DOWNLOADS]: The skill points to official installation repositories on GitHub (spotware/homebrew-tap) and Windows Winget. These are documented as the standard distribution channels for the tool.- [SAFE]: The skill reads and processes data from the cTrader platform. To mitigate injection from untrusted data, it defines strict structural parsing rules (locating payloads by headers and JSON boundaries) and provides clear guidance on interpreting platform-specific response codes and boolean status fields.- [SAFE]: The skill uses environment variables (CTID, PWD-FILE) for authentication. It enforces a 'check-only' policy, instructing the agent to verify the existence and length of these credentials without ever printing or logging their actual values, thus preventing accidental data exposure.
Audit Metadata