ib-option-chain

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: No security issues were detected. The skill follows best practices for interacting with Interactive Brokers via TWS/Gateway. It utilizes standard Python libraries for argument parsing and asynchronous execution.
  • [EXTERNAL_DOWNLOADS]: The skill identifies dependencies on ib-async and trading-skills. ib-async is a reputable library for Interactive Brokers API integration. trading-skills is a prerequisite skill/package. Neither dependency originates from an untrusted source.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts user-supplied ticker symbols and expiration dates as input. This represents a potential vector for indirect prompt injection if the upstream data source was compromised.
  • Ingestion points: User-provided SYMBOL and --expiry arguments in scripts/options.py.
  • Boundary markers: Not explicitly implemented, though the output is structured JSON.
  • Capability inventory: Analysis of scripts/options.py confirms no high-risk capabilities such as eval(), os.system(), or arbitrary file writing are present.
  • Sanitization: Ticker symbols are normalized to uppercase, and arguments are passed directly to specialized API functions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 05:56 PM