trading-signals

SUSPICIOUS. The skill is mostly aligned with trading analysis and uses only official vendor references, but it enables consequential financial recommendations, reaches into local trading-project paths beyond a simple reference role, and writes local analytics metadata unrelated to core advice. No confirmed malware or credential theft is present, but the real-world action potential makes it high-impact and medium overall risk.

The fragment is a readable trading-strategy specification and does not show malware, data exfiltration, persistence, or other intentional supply-chain attacks. It contains significant correctness risks, especially the mismatch between 'long_entry'/'short_entry' and the expected direction values, inclusion of the current candle in rolling breakout channels, and potentially incorrect ATR position-risk calculation. It should not be connected to live order execution until these issues and the omitted helper methods are reviewed.