Security audit
Security checks for vulnerabilities and agentic risk
This finance toolkit is largely disclosed and purpose-aligned, but it should be reviewed because it documents persistent, wildcard-enabled loading of arbitrary external MCP tools.
Install only if you are comfortable with a broad finance agent. Do not enable arbitrary MCP servers or wildcard tool access unless you fully trust the server and its command, and keep broker/OAuth credentials limited to read-only or paper profiles unless you intentionally opt into higher-risk trading access.
The skill documents a generic MCP client path that can load arbitrary local subprocesses or remote MCP servers, including wildcard-enabled tool exposure. That substantially expands the trust boundary beyond finance research and can let the agent invoke non-finance capabilities with filesystem, network, or trading side effects if an operator enables them.
The skill instructs users to create persistent configuration at ~/.vibe-trading/agent.json that defines executable commands, arguments, and enabled remote tools. Persistent agent config can outlive a session and silently alter future agent behavior, increasing the risk of long-term unauthorized tool execution if the config is modified or socially engineered.
Create ~/.vibe-trading/agent.json:
{
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"mcpServers": {
"ibkr": {
"type": "streamableHttp",
"url": "https://api.ibkr.com/v1/api/mcp-public",
"auth": {
"type": "oauth",
"scopes": ["mcp.read"],
The example workflow explicitly encourages using write_file() to create local files but does not warn about overwriting existing files or restricting output paths. In an agent setting, that can lead to unintended modification of local data or project files if prompts are ambiguous or maliciously crafted.
The manifest emphasizes research, backtesting, factor analysis, and market-data workflows, but the tool list includes an unrestricted file-writing primitive. While useful for strategy workflows, generic file creation/modification is broader than the finance-analysis purpose and enables side effects unrelated to research itself.
No suspicious patterns detected.