algo-portfolio
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill generates a Python runner script (
run_portfolio.py) that executes trading strategies as subprocesses. These strategies and their execution environments are defined in a YAML configuration file. - [DYNAMIC_EXECUTION]: The generated script modifies
sys.pathat runtime to import local modules from a relative path structure (.claude/skills/algo-expert/...). This dynamic loading is used to integrate with the project's internal core libraries. - [DATA_EXPOSURE]: The runner script is designed to load sensitive credentials like
OPENALGO_API_KEYfrom environment variables using a.envfile, which is a standard and safe practice for trading automation tools. - [REMOTE_CODE_EXECUTION]: While the skill executes other scripts as subprocesses, this is the primary intended function of a 'portfolio runner' and is controlled via a local configuration file.
Audit Metadata