openfinclaw-ai-quant-research
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@openfinclaw/clipackage from the npm registry and communicates with official vendor domains such ashub.openfinclaw.aiandgateway.openfinclaw.ai. These are documented vendor resources. - [COMMAND_EXECUTION]: The skill utilizes the
npxcommand to run the OpenFinClaw CLI for tasks such as strategy backtesting, research, and configuration. This is the intended behavior for the tool's integration with AI agents. - [CREDENTIALS_UNSAFE]: Instructions are provided for managing API keys using standard practices, such as environment variables and a configuration file located at
~/.openfinclaw/config.json. Placeholders likefch_xxxare used in examples, and no actual credentials are exposed. - [PROMPT_INJECTION]: The skill processes natural language prompts for financial research. While it ingests external data (market data and community strategies), it does not include instructions designed to bypass agent safety filters or override system behavior.
Audit Metadata