ctrader-mcp-servers
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyreferences/trader-workflows.md
LOWAnomalyLOW
references/trader-workflows.md
The fragment describes an auditable trading-operation workflow with substantial safeguards and no evidence of malicious supply-chain behavior, obfuscation, credential theft, or system compromise. Its main risk is legitimate but high-impact financial mutation: order creation, amendments, and closures. The Remote two-step market fallback can temporarily leave a position without SL/TP, and the documented force mode can bypass risk refusal; both require strict authorization and runtime enforcement. The referenced scripts and API implementations require separate review.
Confidence: 96%Severity: 62%
Audit Metadata