Security audit
Pyfolio Performance
Security checks for vulnerabilities and agentic risk
Overview
No malware or exfiltration is shown, but the skill is advertised as pyfolio report generation while its instructions expand into ZVT data fetching, backtesting, possible broker-related workflows, and documentation deployment.
Review this skill before installing because its artifacts are broader than its pyfolio tear-sheet description. If you use it, keep commands in a virtual environment, approve any package installs or ZVT data-directory writes, avoid live broker credentials unless clearly necessary, and treat any trading-related workflow as requiring explicit confirmation.
Static analysis
No suspicious patterns detected.