Is dymx101/clap-trader safe?
Yes. dymx101/clap-trader is safe to install. Oathe's behavioral security audit gave the clap-trader skill by dymx101 a trust score of 86/100 with 4 findings (1 high).
https://github.com/openclaw/skills/tree/main/skills/dymx101/clap-trader
Is dymx101/clap-trader safe to install?
This crypto trading skill appears legitimate and contains no obvious malicious code or prompt injection attempts. However, it executes real financial transactions on Binance, creating significant risk of financial loss if the AI makes poor trading decisions.
What security issues were found in dymx101/clap-trader?
Category Scores
Findings (4)
HIGH Real Financial Trading Operations -40 ▶
This skill executes actual trades on Binance using real money. Poor trading decisions by the AI agent could result in significant financial losses.
MEDIUM External Data Dependencies -20 ▶
The skill fetches data from external news sources and cryptocurrency exchanges, which could potentially be manipulated by attackers.
MEDIUM API Credential Requirements -25 ▶
The skill requires Binance API keys to be set as environment variables, creating potential exposure risk if not properly secured.
LOW Complex Trading Instructions -5 ▶
The skill contains detailed trading instructions that could potentially mask malicious directives, though none were detected.
Should I install dymx101/clap-trader?
Oathe's verdict for dymx101/clap-trader is SAFE with a trust score of 86/100. Recommendation: Install with caution.