mt5-robot-tester
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill relies exclusively on the Python standard library, which eliminates risks from unverified third-party dependencies or supply chain attacks.
- [SAFE]: The local dashboard server binds only to
127.0.0.1and uses per-session CSRF tokens for all state-changing API requests (Start/Stop/Save), following web security best practices. - [SAFE]: Subprocess execution is used to drive the MetaTrader 5 terminal, but arguments are passed as lists and filenames are strictly derived from local directory listings, mitigating command injection risks.
- [SAFE]: File operations, including moving Expert Advisors and collecting reports, use robust patterns such as
os.O_EXCLfor exclusive creation and atomic replacement to prevent data loss or unauthorized modifications. - [SAFE]: The skill includes safety mechanisms like execution fingerprints and lock files to prevent resource contention and ensure consistent state across resumed runs.
Audit Metadata