storyclaw-alpaca-trading
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
aggressive-strategy.jsscript utilizesexecSyncto call other local scripts within the skill for trade execution and account status checks. This is an internal orchestration pattern. - [EXTERNAL_DOWNLOADS]: The skill interacts with the official Alpaca API endpoints (
alpaca.markets) to fetch real-time market data and perform trading operations. These are well-known and trusted financial service domains. - [CREDENTIALS_UNSAFE]: The skill handles sensitive Alpaca API credentials (Key and Secret) through a dedicated loader that reads user-specific JSON files from the
credentials/directory. This is a standard practice for multi-user trading automation tools.
Audit Metadata