The Agent Skills Directory

[SAFE]: The skill manages authentication securely by instructing users to store Alpaca API keys in environment variables (ALPACA_API_KEY, ALPACA_SECRET_KEY) or in a restricted configuration file (~/.alpaca/config.ini with chmod 600). This demonstrates adherence to security best practices for credential handling.
[EXTERNAL_DOWNLOADS]: The skill and its included test script (test_alpaca_connection.py) communicate with Alpaca's official API domains (api.alpaca.markets, paper-api.alpaca.markets, and data.alpaca.markets). These are well-known financial services and the interactions are necessary for the skill's stated purpose of fetching portfolio holdings and market data.
[COMMAND_EXECUTION]: While a Python script is included for testing the API connection, it is intended to be executed manually by the user for verification purposes and is not automatically invoked by the agent in an unsafe manner.
[PROMPT_INJECTION]: The skill instructions in SKILL.md are focused on structured data processing and analysis. There are no attempts to override system safety guidelines or bypass agent constraints.

portfolio-manager