Beta Backtester

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill does not show malware-like behavior, but it appears to present hardcoded trading performance as real backtest results.

Install only if you understand this appears to be a placeholder script. It does not perform real backtesting based on the provided artifacts, so its performance numbers should not be trusted for financial decisions.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI09: Human-Agent Trust Exploitation
Medium
What this means

A user or agent could mistake canned output for actual evidence that a trading strategy works, which could influence financial decisions.

Why it was flagged

The script prints fixed performance metrics and a positive conclusion after only parsing --strategy, --ticker, and --years; it does not fetch historical data, read CSVs, calculate indicators, or run trades as SKILL.md claims.

Skill content
print(f"""📈 BACKTEST RESULTS: {args.strategy.upper()} | {args.ticker}\n...\nTotal trades: 47\nWin rate: 58%\n...\nConclusion: Strategy OUTPERFORMS buy & hold ✅
Recommendation

Treat this as a demo or stub, not a real backtester. Do not use its output for trading decisions unless the skill is changed to perform transparent, data-backed calculations and clearly label simulated or placeholder results.