hft-quant-expert

SUSPICIOUS. The skill content itself is benign documentation, but distribution trust is inconsistent: the same skill appears under different publishers, one path uses unpinned `npx skills add`, and another uses a mutable GitHub ZIP with no visible verification. No credential access or malicious trading automation is shown, so risk is driven mainly by supply-chain and transitive skill-installation concerns rather than the skill’s actual instructions.