XAUUSD

• Analyzed: May 12, 2026, 3:51 AM
• Findings: 1
• Version: 1.0.0
• Hash: 7d4b16a4c6caa3307e209d47f3500b5c2924c9ff9fc287352ed6575a38b73587
• Source: palm
• External report: View on VirusTotal

Findings (1)

Package: (xpi) Version: 1.0.0 Description: The package 'metals-desk-os' is an institutional-grade, fully automated trading operating system designed for XAU/USD and XAG/USD. It features an event-driven, risk-first architecture with multiple interconnected engines for price analysis, market structure, liquidity, macro-economic factors, bias determination, volatility, risk management, and trade execution. It integrates with MetaAPI for MT5 broker connectivity, enabling real-time market data acquisition and order placement (open, partial close, stop-loss management, trailing stops). The system supports various operational modes (Advisory, Semi-Automated, Fully-Automated, Risk-Off) and provides real-time alerts via Telegram and WhatsApp, along with a local WebSocket-based dashboard for monitoring and control. Operational data, such as trade logs, performance metrics, and bias memory, is persistently stored in local JSON files. Sensitive credentials are managed via environment variables. The code logic is entirely consistent with its stated purpose as a sophisticated trading bot, showing no signs of malicious activity, unauthorized data exfiltration, or resource abuse beyond its intended functionality.