Quant Simulation Toolkit

ReviewAudited by ClawScan on May 10, 2026.

Overview

Prompt-injection indicators were detected in the submitted artifacts (unicode-control-chars); human review is required before treating this skill as clean.

This appears to be an educational quant-simulation toolkit. Before installing or running it, verify the code you receive matches the reviewed scripts, use a virtual environment for dependencies, and do not treat the demo models as financial advice or production trading systems. ClawScan detected prompt-injection indicators (unicode-control-chars), so this skill requires review even though the model response was benign.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Users have less information for verifying where the skill came from before running its included scripts.

Why it was flagged

The package has limited provenance metadata, although the artifacts do not show a remote installer, obfuscated dependency, or automatic execution path.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Recommendation

Review the included scripts and install only standard dependencies from trusted package sources before use.

What this means

Running the skill executes local numerical Python scripts, but the visible code is simulation-only and does not show network, credential, or destructive behavior.

Why it was flagged

The skill is explicitly designed to run local Python code; this is expected and purpose-aligned for simulation tools, but users should recognize that invoking it executes code on their machine.

Skill content
Each file runs standalone with `python3 <file>.py` and prints a formatted demo.
Recommendation

Run it in a normal project environment or virtual environment, especially if installing numpy/scipy first.