quant-trading-backtrader

Build, backtest, and optimize quantitative trading strategies in Python using Backtrader with support for indicators, risk management, and reporting.

This package behaves like a simple Backtrader example and contains no obvious exfiltration or secret access, but proceed cautiously because the source is unknown and the bundle contains a suspicious npm-style package.json that lists Python packages (likely a packaging mistake). Before running: 1) Verify the publisher or obtain the SKILL from a trusted source. 2) Inspect code yourself (you already have examples/sma_crossover.py) and search for any network calls or subprocess execution. 3) Run in an isolated environment (virtualenv or VM) and avoid running pip install globally — malicious or typo-squatted PyPI packages are a general risk. 4) If you plan to install dependencies, pin known-good package versions from trusted indexes, and consider auditing the actual PyPI packages (or use a vetted wheel). If you need higher assurance, request the upstream source/repository or a maintained release rather than this anonymous bundle.

Type: OpenClaw Skill Name: quant-trading-backtrader Version: 1.0.0 The skill bundle is benign. It provides a quantitative trading backtesting tool using the Backtrader framework. The `SKILL.md` file contains standard instructions and usage examples without any prompt injection attempts. The `examples/sma_crossover.py` script uses the `os` module solely for creating and then cleaning up a temporary CSV file (`temp_data.csv`) that it generates for backtesting purposes, which is a legitimate and contained file system operation. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or other harmful behaviors.