mt5-backtest

SUSPICIOUS. The core MT5 build/backtest workflow is coherent and mostly uses official/local components, but the skill includes apparent real broker credentials and directs the agent to persist plaintext passwords and manipulate local MT5 auth files. That makes the credential footprint disproportionate enough to treat the skill as risky even without evidence of third-party exfiltration.