trader-backtest
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx neural-traderto execute backtesting logic. It also usesnpm installto ensure the dependency is present. These are standard operations for a developer tool. - [EXTERNAL_DOWNLOADS]: The skill installs the
neural-traderpackage from the npm registry if it is not already available. This is a common pattern for CLI-based skills. - [DATA_VALIDATION]: The skill includes explicit checks for data integrity, such as verifying the
dataSourceto ensure results aren't based on synthetic data before signing them for production use. - [SECRET_MANAGEMENT]: The skill implements the ADR-103 pattern for handling Ed25519 signing keys. It correctly instructs users to keep private keys out of the repository and provides a resolution order that prioritizes environment variables and local files over hardcoded values.
Audit Metadata