trader-risk 100/100 — SaferSkills

Is trader-risk safe to install?

SaferSkills independently audited trader-risk (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

plugins/ruflo-neural-trader/skills/trader-risk/SKILL.md · 1 file

plugins/ruflo-neural-trader/skills/trader-risk/SKILL.md1.4 KB · Markdown

name: trader-risk

description: Assess portfolio risk using npx neural-trader — VaR, CVaR, Sharpe, position sizing, circuit breaker status

allowed-tools: Bash Read mcp__claude-flow__memory_store mcp__claude-flow__memory_search

argument-hint: "[--symbol TICKER] [--portfolio NAME]"

Assess portfolio and position risk using neural-trader's risk engine.

Steps:

Ensure neural-trader is available:

npm ls neural-trader 2>/dev/null || npm install --ignore-scripts neural-trader

Run risk assessment:

   # Single position
   npx neural-trader --risk assess --symbol TICKER
   npx neural-trader --var --symbol TICKER --investment 10000

   # Portfolio-wide
   npx neural-trader --risk assess --portfolio NAME
   npx neural-trader --correlation --portfolio NAME --flag-threshold 0.8

Calculate position sizing:

   npx neural-trader --risk-tolerance 0.02 --symbol TICKER
   npx neural-trader --position-sizing kelly --symbol TICKER

Check circuit breaker status:

Daily loss limit (3%), weekly loss limit (5%)
Correlation spike (>0.85), volatility regime (VIX > 2x)
Max positions, single-name concentration (>10%)

Present: risk metrics, position sizing recommendation, active breakers, alerts
Store assessment:

mcp__claude-flow__memory_store({ key: "risk-TICKER-DATE", value: "RISK_METRICS", namespace: "trading-risk" })

trader-risk— agent skill

Is trader-risk safe to install?

Audit the pieces. Scan the whole. Decide.