backtesting-trading-strategies

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches historical price data from Yahoo Finance and the CoinGecko API (api.coingecko.com). These are established and reputable sources for financial data required for the skill's primary function.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external market data, creating a standard ingestion surface.
  • Ingestion points: Data is retrieved from the CoinGecko API in scripts/fetch_data.py and read from cached CSV files in scripts/backtest.py.
  • Boundary markers: Data is expected in structured CSV or JSON formats; no specific natural language boundary markers are implemented for the fetched content.
  • Capability inventory: The skill uses file write operations for caching data and saving reports in the data/ and reports/ directories, and employs matplotlib for chart generation.
  • Sanitization: The backtest.py and fetch_data.py scripts sanitize trading symbols by replacing slashes and hyphens when generating filenames to prevent directory traversal.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:37 AM
Security Audit — agent-trust-hub — backtesting-trading-strategies