mt5_trade

• Risk level: Low
• Analyzed: Feb 16, 2026, 7:00 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requirements and runtime instructions are coherent with its stated purpose: it calls a local MT5 HTTP bridge on 127.0.0.1:8000, drafts orders and requires explicit user confirmation before confirming trades.

This skill appears internally consistent, but consider these practical points before installing: 1) It will run PowerShell commands on your machine (Invoke-RestMethod) to call http://127.0.0.1:8000 — only install if you trust that local service. 2) The safety rule requiring the exact user reply 'CONFIRM ORDER' is textual: the platform or agent could ignore it if misconfigured, so verify interactive confirmation is enforced by your agent UI or policy. 3) Test with a non-production/dry-run broker instance first to ensure the local API behaves as expected. 4) If you do not run an MT5 HTTP bridge on localhost, the skill will fail harmlessly; if you do, review that bridge's code to ensure it authenticates and logs appropriately. 5) If you want stronger guarantees, run the agent with restricted exec permissions or audit the exact PowerShell commands executed during a trial run.