ib-trades-history

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were identified. The skill facilitates legitimate interaction with the Interactive Brokers trading platform.\n- [DATA_EXPOSURE]: The skill interacts with sensitive financial trade data. It connects to the local TWS/Gateway API on ports 7496/7497 or a user-defined port via IB_PORT. It also supports the official IBKR Flex Web Service using a user-supplied token and query ID. This is standard functionality for trading tools.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from IBKR API responses and local XML files via the --file argument. This ingestion surface is a known vector for indirect prompt injection, but the skill implements standard data fetching patterns. Mandatory Evidence Chain: (1) Ingestion points: Local file paths in scripts/trades.py and remote IBKR API responses; (2) Boundary markers: Not explicitly defined in this wrapper; (3) Capability inventory: Script performs network requests to IBKR and local file reads; (4) Sanitization: Arguments are parsed via argparse, and data processing is handled by the trading_skills dependency.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 05:56 PM