The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill requires the user to store their Interactive Brokers account username and password (IBEAM_ACCOUNT, IBEAM_PASSWORD) in a plaintext .env file as shown in the SKILL.md setup instructions and the scripts/setup.sh template.
[COMMAND_EXECUTION]: The skill utilizes several scripts that execute system-level commands. scripts/setup.sh performs installations using apt-get and manages files with wget and unzip. scripts/keepalive.py uses subprocess.Popen to execute a local shell script (authenticate.sh) for session management based on authentication status checks.
[EXTERNAL_DOWNLOADS]: The scripts/setup.sh script downloads the IBKR Client Portal Gateway binary from the official Interactive Brokers domain (download2.interactivebrokers.com). This is documented as a legitimate dependency for the skill's primary function.
[DATA_EXFILTRATION]: Multiple components, including scripts/trading_bot.py and scripts/keepalive.py, disable SSL/TLS certificate verification (verify=False) and suppress related security warnings. Although intended to facilitate connection to the local gateway's self-signed certificate, this practice increases vulnerability to man-in-the-middle attacks if the execution environment's network is compromised.

ibkr-trading