trading-signals-skill
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill provides templates and detailed instructions in
reference/daily-trading-workflow.mdfor setting up 'Desktop Scheduled Tasks' within the~/.claude/scheduled-tasks/directory. This mechanism allows the agent to execute automated pre-market and end-of-day routines periodically across sessions. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data through the
SignalSiphonsentiment pipeline described inreference/sentiment-signals.md. - Ingestion points: Scrapes data from Reddit (r/wallstreetbets, r/options, etc.) and Twitter/X cashtag streams.
- Boundary markers: Not explicitly defined in the logic, but utilizes multi-model consensus to validate findings.
- Capability inventory: Position sizing, strategy selection, and local file writing (e.g., to
~/trading/daily/). - Sanitization: Implements quality gates such as emoji saturation checks, ALL CAPS ratio filtering, and author reputation tracking to filter out noise and malicious content.
- [DATA_EXPOSURE]: The skill instructs the agent to log metrics and analysis outcomes to specific local files, such as
~/.claude/skill-analytics/last-outcome-trading-signals-skill.jsonand daily reports in~/trading/daily/. These operations are transparently defined for analytics and record-keeping within the trading domain.
Audit Metadata