trader-portfolio-cg
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
neural-traderpackage usingnpm install --ignore-scripts. This is a standard dependency management practice that includes security flags to prevent the execution of arbitrary scripts during the installation process. - [COMMAND_EXECUTION]: Uses the
npxcommand to run theneural-traderCLI tool for retrieving portfolio data and performing optimization. These commands are scoped to the intended functionality of the skill. - [DATA_EXFILTRATION]: All data operations, including reading and storing portfolio weights, are performed through authorized MCP tools (
mcp__claude-flow__memory_store,mcp__claude-flow__memory_search) or local CLI outputs. No external network requests to untrusted domains were detected.
Audit Metadata