The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides scripts for portfolio analysis (analyze_portfolio.py and compare_strategies.py) that process local CSV data. All command-line interactions are standard for data analysis tools and do not involve shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill uses established, reputable Python libraries (pandas, numpy, and quantstats). These are standard industry tools for financial data science and do not represent a supply chain risk in this context.
[DATA_EXFILTRATION]: No network operations or exfiltration patterns were found. The skill operates locally on provided datasets to generate statistics and HTML reports.
[INDIRECT_PROMPT_INJECTION]: While the skill ingests external data (CSV files), the data is processed purely as numerical series for mathematical calculations. There are no capability surfaces (such as dynamic code execution or network sends) that could be exploited via malicious data content.

portfolio-analytics