trading-signals
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill facilitates the creation of persistent execution mechanisms via platform-specific features.
- The file
reference/daily-trading-workflow.mdprovides templates for creatingDesktop Scheduled Taskslocated at~/.claude/scheduled-tasks/<name>/SKILL.md. These tasks are designed to survive restarts and execute automatically at specific time anchors (e.g., Pre-Market, Market Open, EOD). - The
SKILL.mdfile instructs the agent to write a JSON 'Outcome Sidecar' log to~/.claude/skill-analytics/last-outcome-trading-signals.jsonat the conclusion of every analysis session. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from untrusted external sources, creating a surface for indirect prompt injection.
- Ingestion points: The file
reference/sentiment-signals.mddescribes a pipeline that scrapes content from Reddit (r/wallstreetbets, r/cryptocurrency) and Twitter/X (Cashtag streams) to evaluate market sentiment. - Boundary markers: The skill documentation does not specify the use of strict boundary markers or 'ignore' instructions for the data ingested from social media to prevent the agent from obeying instructions hidden in user posts.
- Capability inventory: The skill has access to significant capabilities, including local file writing (
~/.claude/skill-analytics/,~/trading/daily/) and interaction with theAlpaca MCPserver for live data and order placement. - Sanitization: The skill describes 'Quality Gates' in
reference/sentiment-signals.md(filtering for emoji count, all-caps, and account age), but these are focused on data quality rather than security sanitization to prevent prompt injection.
Audit Metadata