Kraken CLI

• Analyzed: May 11, 2026, 6:35 AM
• Findings: 1
• Version: 1.2.0
• Hash: c21f983959a6f9d3d396b509304cc702bfca8092965e1889dc935160876b5588
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a well-structured and security-conscious Bash CLI for interacting with Kraken Spot and Futures APIs. It implements several protective measures, including automated redaction of API keys and signatures in stderr logs (lib/kraken_redact.sh), a local registry-based allow-list for API endpoints (config/endpoints.tsv), and mandatory confirmation flags for state-changing operations. The logic for authentication and request signing follows standard Kraken API specifications using openssl, and no evidence of data exfiltration, unauthorized network calls, or malicious prompt injection was found.