Nofa Backtest

• Verdict: Pass
• Analyzed: May 11, 2026, 12:42 AM
• Findings: 0
• Version: 0.1.0
• Hash: cd4602b0e57999901cc4a09eaf68ec4d1c5b7416ce11e9e1074443431a008257
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: nofa-backtest Version: 0.1.0 The skill bundle provides documentation and instructions for an AI agent to interact with a crypto trading strategy backtesting and simulated trading API. All API calls are directed to a single, declared domain (`api-dev.reclaw.xyz`). The `SKILL.md` includes a critical security warning against sending API keys to other domains. The `references/strategy-generator.md` file, which guides the AI agent's conversational behavior, contains extensive validation rules, default values, and explicit instructions for generating well-formed JSON strategies and calling a specific API endpoint (`/backtest/run`). There is no evidence of intentional harmful behavior such as data exfiltration, malicious execution, persistence, or instructions designed to bypass security measures or perform unauthorized actions. The instructions actively guide the agent to validate user input and adhere to a strict schema, mitigating prompt injection risks.