create-strategy

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a local shell script wrapper (scripts/upbit-strategy-toolkit.sh) to invoke a Python-based CLI tool via uv. This is the intended primary purpose of the skill for strategy validation.
  • [SAFE]: The execution script (scripts/upbit-strategy-toolkit.sh) correctly implements a discovery mechanism to run from a local repository or fetch the official tool from the vendor's GitHub repository (upbit-official/upbit-strategy-toolkit.git) using uvx. This follows safe, trusted source practices.
  • [SAFE]: Instructions contain explicit guardrails against live trading and financial advice, specifically blocking commands related to automated orders and redirecting users to separate, dedicated tools for execution.
  • [SAFE]: Data operations are restricted to writing JSON strategy files to a local {data_root}/strategies/ directory after explicit user approval, following a well-defined validation loop.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 06:57 AM
Security Audit — agent-trust-hub — create-strategy