quant-research-replication
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/source_discovery.pyscript performs network requests to reputable academic APIs including arXiv, Crossref, and Semantic Scholar. It is designed to discover and download research papers and reports as part of the skill's primary research replication function. - [COMMAND_EXECUTION]: The
scripts/check_dependencies.pyscript utilizessubprocess.runto invoke thepippackage manager. This functionality is used to install and manage the standard scientific Python libraries (such as pandas, numpy, and matplotlib) required for the backtesting and factor validation modules. - [REMOTE_CODE_EXECUTION]: The
scripts/check_dependencies.pyscript usesimportlib.import_module()to dynamically verify that required dependencies are correctly installed and available in the runtime environment. - [DATA_EXFILTRATION]: While the skill makes outbound network connections, they are restricted to well-known research services and search engines for data discovery. No patterns of credential harvesting or sensitive file exfiltration (e.g., SSH keys or environment secrets) were identified.
- [SAFE]: The project follows structured output contracts and includes multiple quality gate scripts (
quality_gate_check.py,check_step5_strategy.py, etc.) designed to verify the integrity and honesty of the research artifacts produced.
Audit Metadata