The Agent Skills Directory

[SAFE]: The skill implements standard quantitative finance methodologies for signal validation. It uses common, well-known libraries (NumPy, Pandas) and contains no hidden or malicious functionality.
[COMMAND_EXECUTION]: The skill provides a CLI interface for research purposes. The command execution is restricted to standard Python operations on local CSV files provided by the user. There is no evidence of arbitrary command execution or shell injection vulnerabilities.
[DATA_EXFILTRATION]: No network operations or data exfiltration patterns were detected. The scripts process data locally and do not communicate with external servers. Documentation mentions external data sources (PandaAI), but the tool itself is vendor-neutral and does not include any automated data fetching scripts.
[CREDENTIALS_SAFE]: No hardcoded API keys, tokens, or sensitive credentials were found in the codebase or metadata.
[EXTERNAL_DOWNLOADS]: Dependencies listed in requirements.txt (numpy, pandas) are standard industry packages. No remote scripts are downloaded or executed during runtime.
[PROMPT_INJECTION]: The skill instructions and metadata do not contain patterns intended to bypass agent safety filters or override system prompts.
[INDIRECT_PROMPT_INJECTION]: While the skill processes external CSV files, the data is converted to numerical matrices for statistical analysis. There is no significant surface for indirect prompt injection as the content is not interpolated back into LLM instructions as natural language text.
[OBFUSCATION]: The source code is clear and well-documented. No Base64, hex encoding, zero-width characters, or other obfuscation techniques were detected.

walk-forward-validator