Skip to content

Add interactive-brokers community pack#8

Open
piersdd wants to merge 2 commits intoGroupthink-dev:mainfrom
piersdd:contrib/interactive-brokers
Open

Add interactive-brokers community pack#8
piersdd wants to merge 2 commits intoGroupthink-dev:mainfrom
piersdd:contrib/interactive-brokers

Conversation

@piersdd
Copy link
Copy Markdown
Contributor

@piersdd piersdd commented Apr 18, 2026

Summary

Community-submitted pack for Interactive Brokers brokerage analysis.

  • Pack spec: v1.7 (community tier, MIT licence)
  • Agent: ib-analyst (operator) — read-only portfolio and market analysis
  • Skills: portfolio-snapshot, market-scan, morning-brief
  • Pack-local guardrails: 3 rules (fin-001 disclaimer, scope-001 vault confinement, scope-002 credential hygiene)
  • Service contract: brokerage-v1 (read-only subset)

Read-only MVP — no order placement, no account modification. Designed to validate the DD-146 community agent trust model and DD-145 guardrails pipeline.

Author

@piersdd — community contributor

Notes

This pack uses pack: "1.7" which requires the pack-spec schema bump (DD-145 Phase 0). Schema validation will flag this until the spec is updated — this is expected and proves the pipeline catches version mismatches.

Read-only brokerage analysis pack against Interactive Brokers Client
Portal Gateway. Single agent, 3 skills, 3 pack-local guardrails.

Demonstrates pack-spec v1.7 features:
- Pack-local guardrails (DD-145)
- Agent trust model compatibility (DD-146)
- Structured service requirements with brokerage-v1 contract

Shadow mode config included for future execution skills (v2).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@stallari-scanner-bot
Copy link
Copy Markdown

Pack Validation

Failed — found 1 error(s):

  • Failed to fetch plugins/packs/interactive-brokers.yaml

Please fix the errors above and push again. See the pack spec for reference.

@stallari-scanner-bot
Copy link
Copy Markdown

Pack Validation

Passed — 1 pack file(s) validated successfully.

@stallari-scanner-bot
Copy link
Copy Markdown

Security Scan

Passed — 1 pack file(s) scanned. No security findings.

Add security scanning to the validation pipeline:
- scripts/security-scan.js runs SINJ injection detection and
  cross-pack clone detection (trigram Jaccard) on all packs
- Per-pack exceptions in plugins/scan-exceptions/{name}.json
- GitHub Actions step after manifest validation, fails on
  critical/high findings
- Makefile scan-packs target, added to validate-all

Cloudflare-edge-platform gets SINJ-003 exception (legitimate URL
references in infrastructure skill prompts).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@piersdd piersdd force-pushed the contrib/interactive-brokers branch from 5eb0aaa to e637be1 Compare April 19, 2026 01:38
@stallari-scanner-bot
Copy link
Copy Markdown

Pack Validation

Passed — 1 pack file(s) validated successfully.

@stallari-scanner-bot
Copy link
Copy Markdown

Security Scan

Passed — 1 pack file(s) scanned. No security findings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant