Momentum is the opposite instinct to mean reversion: buy strength, ride the trend, exit when it breaks. It’s a natural fit for an agent that can watch many names at once — and a strategy where the reversals are fast and unforgiving. Here’s how it works and how to bound it.
How it works
A momentum agent looks for names that are trending up (or breaking out), buys to ride the move, and exits when the trend stalls or reverses. You can express it as a rule about relative strength or recent return over a lookback window.
Where it goes wrong
- Whipsaws. Trends fail. A breakout that reverses can hand back gains quickly, and an agent without a tight exit will sit through it.
- Crowding into winners. Momentum naturally concentrates the account into whatever’s running — exactly when it’s most extended.
- Headline bait. Momentum agents react to news and price spikes — which makes them a prime target for manipulated input. A pumped or planted headline can look like a breakout signal. This is where momentum and prompt injection intersect directly.
The guardrails that matter here
- Concentration cap — the essential limit for momentum; stops the account from piling into one extended name. See spending and trade limits.
- Circuit breaker — halts a flurry of entries when everything looks like it’s breaking out at once.
- Kill switch — reversals are fast; know your STOP phrase and MCP disconnect.
- Prompt-injection rule — instruct the agent to treat rule-changing or suspiciously hyped input as a possible attack, not a signal.
The free SecProve Agent Safety Kit ships all of these in one config.
How the agent runs this (tools, and the catch)
Momentum needs a lookback — recent return or relative strength over N days — and that runs into the same data limit as mean reversion: get_equity_quotes is current-only, so the agent needs a historical-price source or its own accumulated log to measure strength. Treat any external feed as untrusted (manipulated-data rules apply).
Once it has a signal, the execution path is: get_equity_quotes to confirm the live price → get_portfolio / get_equity_positions to check the concentration cap → review_equity_order (pre-trade warnings) → approval → place_equity_order, re-checking your exit rule each pass.
Momentum’s extra exposure is structural: it reacts to strength, which is exactly what a pump-and-dump manufactures. So the allowlist and advisory-only-signal rules carry more weight here than in any other strategy.
Before you run it
See how to connect your agent and the pre-flight checklist first.
Running Claude? Install the SecProve Agent Safety skill and invoke this strategy bounded and guardrailed with /trading-agent-safety:momentum.
Momentum agents act on what they read — which is exactly why spotting a planted signal is the skill that protects the account. It’s measurable. Test yours at secprove.com.