Alpaca Trading

• Analyzed: May 14, 2026, 3:37 AM
• Findings: 1
• Version: 2.1.0
• Hash: 3cfe64973d3f4342f3971d172e755b61bb2859350f23fd9c31dfcd0e9e8a02a5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The alpaca-trading skill is a legitimate integration for interacting with the Alpaca REST API. It provides a bash wrapper (scripts/alpaca.sh) for curl commands and includes comprehensive documentation and safety guidelines in SKILL.md, such as defaulting to paper trading and requiring user confirmation for orders. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.