ib-portfolio

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs its stated function of retrieving financial portfolio data from a local Interactive Brokers Gateway instance (ports 7496/7497) without any malicious patterns.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface as it reads information from the Interactive Brokers API.
  • Ingestion points: Financial position data retrieved via the ib-async library in scripts/portfolio.py.
  • Boundary markers: None explicitly present in instructions, but data is returned to the agent in structured JSON format.
  • Capability inventory: The skill is restricted to reading portfolio data and does not have write access to sensitive files or arbitrary network exfiltration capabilities.
  • Sanitization: Standard JSON serialization is used to format the output.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 05:56 PM
Security Audit — agent-trust-hub — ib-portfolio