IBKR Trader Toolkit

• Analyzed: May 13, 2026, 5:26 PM
• Findings: 1
• Version: 0.1.4
• Hash: 4be5303411161d4edd2d4c792b36ccf4b5123045977ad2c2315bcf03af8eb836
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle is a comprehensive trading toolkit for Interactive Brokers with extensive documentation. However, it is classified as suspicious due to the use of `eval()` in `scripts/alerts_monitor.py` to process user-defined logic from a configuration file (`~/.ibkr_alerts.yaml`). While the script attempts to sandbox the execution using a restricted globals dictionary, `eval()` remains a high-risk vulnerability that could allow arbitrary code execution if the configuration file is compromised. No evidence of intentional malice, data exfiltration, or unauthorized remote communication was found.