arrow_backAI Skill ShieldpublicDefault-branch GitHub scan
Trust report
alpacahq/alpaca-skills
Agent skills for Alpaca's Trading API and Broker API: drop-in SKILL.md files for AI coding assistants
View scanned commit on GitHubopen_in_new0%Static score
74% score26% score gap
Highest finding: High severityLatest scan
high severity
Static analysis score
Install decision
Needs Manual Review
The scan is usable, but install-time behavior still needs a human look before any agent install step.
Scan identity
- Scanned
- 2026-08-06
- Commit
- 9044692bab24
- License
- Apache-2.0
- Repository
- Active
Repository scan summary
- policyFindings
- 78
- terminalInstall surface
- 1
- Repository reach
- 107
Validation findings detected
Execution paths reviewed
GitHub stars
Highest-priority findings
The latest default-branch scan, ordered by severity.
- highAuto-confirm dangerous operationsskills/broker-api/integration/SKILL.md:51
- mediumping to external hostskills/broker-api/account-onboarding/SKILL.md:39
- mediumBroken string concatenationskills/broker-api/account-onboarding/SKILL.md:41
- mediumBroken string concatenationskills/broker-api/market-data/SKILL.md:96
- mediumNo usage examplesskills/broker-api/market-data/SKILL.md
Share this trust result
The badge stays linked to the latest default-branch scan for this skill path.
Do you consider this skill safe to use?
Community signals help prioritize human review; they do not change the scan verdict.
AI Skill Shield is an automated pre-install review, not a guarantee of safety. Confirm sensitive permissions and execution paths before installation.