ib-trades-history
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
uv run pythonto execute a local script (scripts/trades.py) which acts as a CLI wrapper. This is the intended mechanism for the skill's functionality. - [DATA_EXPOSURE]: The skill handles sensitive financial data and API tokens (FlexReport tokens). These are passed as arguments to the local script to facilitate legitimate data retrieval from Interactive Brokers. No evidence of data exfiltration or hardcoded credentials was found.
- [EXTERNAL_DOWNLOADS]: The skill relies on
ib-async, which is a standard open-source library used for Interactive Brokers API integration.
Audit Metadata