aicoin-freqtrade
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various system commands to manage the Freqtrade environment. This includes process management (nohup/kill for freqtrade), dependency installation (git clone, brew install), and environment checks (python3 --version, which).
- [EXTERNAL_DOWNLOADS]: Fetches the official Freqtrade source code from GitHub (
github.com/freqtrade/freqtrade.git) and the 'uv' Python package manager from its official domain (astral.sh). - [REMOTE_CODE_EXECUTION]: Utilizes a remote installation script for the 'uv' tool from a well-known technology provider (
curl -LsSf https://astral.sh/uv/install.sh | sh) during the setup process on macOS. - [CREDENTIALS_UNSAFE]:
lib/defaults.jsoncontains a hardcoded public API key and secret. These are explicitly documented as vendor-provided credentials for the public free tier of the AiCoin service, intended for out-of-the-box functionality.
Audit Metadata