Ibkr Options Assistant

• Analyzed: May 14, 2026, 3:31 PM
• Findings: 1
• Version: 0.2.5
• Hash: 6a9d176ad315e2d58fe08816412bd02d4d3fdf807004b469215f1ff2f0a91f5d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle is a highly functional trading assistant for Interactive Brokers that includes a high-risk script, `scripts/trade.py`, capable of executing live financial orders (stocks, options, futures, and FX). While the developer has implemented significant safety measures—including 'dual-gate' authentication (requiring both an environment variable and a CLI flag), notional/quantity guardrails, and a ticker blocklist—the inherent capability for an AI agent to move real money is a high-risk behavior. Additionally, `SKILL.md` contains steering instructions that direct the agent to use these tools for any financial query, even if the user does not explicitly mention IBKR. The code itself appears well-authored and security-conscious, notably in `scripts/alerts_monitor.py`, which uses a safe AST-based evaluator instead of `eval()` for processing user-defined conditions.