ib-report-delta-adjusted-notional-exposure
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
scripts/delta_exposure.pyusing theuvtool to query the Interactive Brokers API on local ports 7496 or 7497.\n- [EXTERNAL_DOWNLOADS]: The skill declares a dependency ontrading-skills, which is a related component consistent with the author's other tools.\n- [DATA_EXFILTRATION]: The skill reads financial data (positions, account IDs) from a local IBKR instance to generate a report. No data is sent to external or non-whitelisted domains.\n- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes external data from the IBKR API (such as ticker symbols and account names) to generate a markdown report.\n - Ingestion points: Data retrieved from the Interactive Brokers API in
scripts/delta_exposure.py.\n - Boundary markers: None explicitly provided in the report generation instructions.\n
- Capability inventory: Local script execution (
uv run) and file writing to thesandbox/directory.\n - Sanitization: No specific sanitization or validation logic is mentioned for the data fetched from the API.
Audit Metadata