algo-portfolio

Pass

Audited by Gen Agent Trust Hub on Apr 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill generates a Python runner script (run_portfolio.py) that executes trading strategies as subprocesses. These strategies and their execution environments are defined in a YAML configuration file.
  • [DYNAMIC_EXECUTION]: The generated script modifies sys.path at runtime to import local modules from a relative path structure (.claude/skills/algo-expert/...). This dynamic loading is used to integrate with the project's internal core libraries.
  • [DATA_EXPOSURE]: The runner script is designed to load sensitive credentials like OPENALGO_API_KEY from environment variables using a .env file, which is a standard and safe practice for trading automation tools.
  • [REMOTE_CODE_EXECUTION]: While the skill executes other scripts as subprocesses, this is the primary intended function of a 'portfolio runner' and is controlled via a local configuration file.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 26, 2026, 10:07 PM