ib-option-chain
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues were detected. The skill follows best practices for interacting with Interactive Brokers via TWS/Gateway. It utilizes standard Python libraries for argument parsing and asynchronous execution.
- [EXTERNAL_DOWNLOADS]: The skill identifies dependencies on
ib-asyncandtrading-skills.ib-asyncis a reputable library for Interactive Brokers API integration.trading-skillsis a prerequisite skill/package. Neither dependency originates from an untrusted source. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-supplied ticker symbols and expiration dates as input. This represents a potential vector for indirect prompt injection if the upstream data source was compromised.
- Ingestion points: User-provided
SYMBOLand--expiryarguments inscripts/options.py. - Boundary markers: Not explicitly implemented, though the output is structured JSON.
- Capability inventory: Analysis of
scripts/options.pyconfirms no high-risk capabilities such aseval(),os.system(), or arbitrary file writing are present. - Sanitization: Ticker symbols are normalized to uppercase, and arguments are passed directly to specialized API functions.
Audit Metadata