skills/ruvnet/ruflo/trader-backtest/Gen Agent Trust Hub

trader-backtest

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npx neural-trader to execute backtesting logic. It also uses npm install to ensure the dependency is present. These are standard operations for a developer tool.
  • [EXTERNAL_DOWNLOADS]: The skill installs the neural-trader package from the npm registry if it is not already available. This is a common pattern for CLI-based skills.
  • [DATA_VALIDATION]: The skill includes explicit checks for data integrity, such as verifying the dataSource to ensure results aren't based on synthetic data before signing them for production use.
  • [SECRET_MANAGEMENT]: The skill implements the ADR-103 pattern for handling Ed25519 signing keys. It correctly instructs users to keep private keys out of the repository and provides a resolution order that prioritizes environment variables and local files over hardcoded values.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 09:25 PM