The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The file contains hardcoded broker account credentials at the end of the SKILL.md document. The credentials include Login: 128364028, Password: Ready@123, and Server: Exness-MT5Real7. While potentially intended as examples, providing a plaintext password is a high-risk practice.
[COMMAND_EXECUTION]: The skill orchestrates backtesting through a series of local shell scripts (compile.sh, backtest.sh, run.sh). These scripts invoke the metaeditor64.exe and terminal64.exe binaries via Wine on macOS to compile and execute MQL5 code.
[DATA_EXPOSURE]: The instructions describe the management and backup of sensitive MT5 files, including accounts.dat (which contains encrypted cached logins) and a locally generated credentials.env file. The agent is instructed to read and write these files to facilitate automated authentication.
[PROMPT_INJECTION]: The skill introduces a surface for indirect prompt injection. The agent is instructed to parse MT5 tester logs, CSV trade reports, and MQL5 source code to perform analysis. If these external files contain adversarial instructions, they could influence the agent's behavior during the analysis phase. No specific boundary markers or sanitization steps are defined to mitigate this risk.
[EXTERNAL_DOWNLOADS]: The skill references downloads for the MetaTrader 5 application from metatrader5.com. This is a well-known service for the trading domain and is documented for environment setup.

mt5-backtest