BacktestBot

Backtest trading strategies against historical market data with performance analytics and risk metrics

Security Scan

The skill's stated purpose (backtesting) matches the single API credential it requests, but the package lacks provenance (no source/homepage), omits endpoint/implementation details, and has a small inconsistency in declared vs. documented environment variables—so exercise caution before handing over an API key.

Purpose & Capability

The name/description (backtesting + analytics) align with requesting an API key to a backtest service. Asking for a BACKTESTBOT_API_KEY is proportionate to that purpose. However, the registry entry lists no source, homepage, or implementation details, which means you cannot verify where your API key will be sent or how data will be handled.

Instruction Scope

SKILL.md describes backtesting capabilities and references an optional BACKTESTBOT_DATA_DIR for caching, but it does not specify endpoints, request formats, or where network requests are sent. The SKILL.md documents BACKTESTBOT_DATA_DIR as an optional variable but that variable is not listed in the declared requires.env block—this mismatch is a minor inconsistency. Because the instructions lack explicit trustable endpoints or telemetry/privacy statements, it's unclear what data (strategy definitions, historical data, or results) will be transmitted off-host.

Install Mechanism

This is an instruction-only skill with no install spec or code files, so nothing will be written to disk or downloaded during install. That lowers the attack surface relative to skills that fetch external binaries.

Credentials

Only a single required credential (BACKTESTBOT_API_KEY) is declared, which is proportionate for an external backtesting API. The optional BACKTESTBOT_DATA_DIR is mentioned but not declared in requires.env. There are no unrelated or extra credentials requested, but because the API key will be used to authenticate network calls to an unverified service, you should treat it as sensitive and only provide a key with limited scope.

Persistence & Privilege

The skill does not request 'always: true' and is user-invocable only. It does not declare any system-wide configuration changes or elevated persistence. Autonomous invocation is allowed by default but is not combined here with other high-risk flags.

What to consider before installing

This skill appears to do what it says (backtesting), but the package provides no source code, homepage, or endpoint documentation — so you cannot verify where your BACKTESTBOT_API_KEY or any strategy/data will be sent. Before installing or setting BACKTESTBOT_API_KEY: (1) prefer to obtain the key from a known/trustworthy provider and confirm the service's endpoint and privacy policy, (2) create a scoped or revocable API key with least privilege, (3) avoid using production accounts or real brokerage credentials for testing, (4) if you set BACKTESTBOT_DATA_DIR, point it to a controlled directory and confirm what is cached, and (5) be prepared to revoke the API key if you notice unexpected activity. If the publisher can supply a homepage, API docs, or contact info, re-evaluate once those are available.

Backtest trading strategies against historical market data with detailed performance analytics.

What it does

BacktestBot enables you to define, test, and evaluate trading strategies using historical data, including:

• Strategy definition — describe strategies in natural language or structured rules (entry/exit signals, position sizing, stop losses)
• Historical simulation — run strategies against years of tick or daily data across equities, options, futures, and crypto
• Performance metrics — Sharpe ratio, max drawdown, win rate, profit factor, CAGR, and trade-level breakdown
• Risk analysis — value-at-risk, correlation to benchmarks, worst-case drawdown periods, and tail risk metrics
• Comparison — test multiple strategy variants side-by-side and rank by risk-adjusted returns

Usage

Ask your agent to backtest strategies and analyze results:

• "Backtest a mean reversion strategy on SPY using RSI below 30 as entry over the last 5 years"
• "Compare buy-and-hold vs momentum rotation across the S&P 500 sectors since 2020"
• "What is the max drawdown if I use a 2% trailing stop on AAPL swing trades?"
• "Optimize the lookback period for my moving average crossover strategy on QQQ"

Configuration

Set the following environment variables:

• BACKTESTBOT_API_KEY — API key for BacktestBot. Used to authenticate requests for historical OHLCV data, strategy simulations, and performance metrics.
• BACKTESTBOT_DATA_DIR — (optional) local directory for cached historical data. Defaults to ~/.backtestbot/data.