blave-quant
A reusable agent skill published by blave-tw/blave-quant-skill.
How do I install this agent skill?
npx skills add https://github.com/blave-tw/blave-quant-skill --skill blave-quantIs this agent skill safe to install?
- Gen Agent Trust Hubfail
The skill offers extensive tools for crypto and stock trading, including a robust manual confirmation requirement for financial actions. However, it features a strategy marketplace that directs the agent to download and run external Python code from a remote API. This capability serves as a remote code execution vector and could potentially be used to bypass the skill's safety protocols if malicious code is executed. The skill also ingests untrusted news data, which presents an indirect prompt injection risk.
- Socketwarn
2 alerts: gptAnomaly, gptSecurity
- Snykfail
Risk: HIGH · 3 issues
- Runlayerwarn
4/12 files flagged
- ZeroLeakspass
Score: 93/100 · 2 sections analyzed
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/blave-tw/blave-quant-skill/blave-quant">View blave-quant on skillZs</a>