tradermonty/claude-trading-skills portfolio-manager

Checked the catalogued skill at portfolio-manager.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub

F AI-triaged 18

F Security

F; retained sample includes a critical finding · SD-013 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 18

transparencymedium SD-007

assets/holdings-review.schema.json

securitycritical SD-013

references/alpaca-mcp-setup.md

securitycritical SD-013

references/alpaca-mcp-setup.md

securitycritical SD-013

references/alpaca-mcp-setup.md

securitycritical SD-013

references/alpaca-mcp-setup.md

securitycritical SD-013

references/alpaca-mcp-setup.md

securitycritical SD-013

scripts/check_alpaca_connection.py

securitycritical SD-013

scripts/check_alpaca_connection.py

securitycritical SD-013

scripts/check_alpaca_connection.py

securitycritical SD-013

scripts/check_alpaca_connection.py

2 suppressed by AI triage

securityhigh SD-007 benign_example

scripts/tests/test_check_alpaca_connection.py

The code only returns a string URL in a test, it does not perform an outbound network call.

securityhigh SD-007 benign_example

scripts/tests/test_check_alpaca_connection.py

Similarly, this test merely returns a URL string and does not issue a network request.