Security audit
Nautilus Algo Trading
Security checks across malware telemetry and agentic risk
Overview
The skill is an instruction-only backtesting helper that asks about markets/data/strategy and references a large set of documentation; its requested actions and checks are coherent with a backtesting workflow and do not ask for unrelated credentials or hidden installs, but it may instruct the agent to run package installs and create/read local data directories (expected for this domain).
This skill is internally consistent with a backtesting helper: it will ask you for market/data/strategy details and may instruct the agent to run small host-side checks (python -c import zvt, test write to ~/.zvt) and to install missing Python packages (pip install zvt). Before running those commands: 1) confirm you trust installing the referenced Python packages from PyPI (they will run network downloads); 2) be aware the skill may create/write to a data directory (default ~/.zvt) — change ZVT_HOME if you prefer a different location; 3) no secrets or cloud credentials are requested by the skill, so there is no obvious secret-exfiltration vector in the provided files. If you want extra caution, run the precondition commands yourself in a controlled environment (virtualenv) rather than letting the agent run them automatically.
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.