Is fueav/bot-trade safe?
Yes. fueav/bot-trade is safe to install. Oathe's behavioral security audit gave the bot-trade skill by fueav a trust score of 85/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/fueav/bot-trade
Is fueav/bot-trade safe to install?
This skill provides legitimate documentation for connecting to a cryptocurrency trading simulation platform. While it requires external API access and credential storage, the functionality appears benign and properly documented.
What security issues were found in fueav/bot-trade?
Category Scores
Findings (4)
MEDIUM External API endpoint access -15 ▶
The skill instructs the agent to make HTTP requests to an external API endpoint (https://lark.openclaw-ai.cc) for trading operations, which could potentially be used for data exfiltration
LOW Credential storage requirement -10 ▶
The skill requires storing API credentials locally in ~/.config/mosstrade/credentials.json, which could be a security risk if credentials are compromised
LOW Trading data transmission -10 ▶
The skill transmits potentially sensitive trading information (portfolio data, trading decisions) to external servers, which could be intercepted or misused
INFO External URL references -15 ▶
The skill contains references to external URLs that the agent will access, though these appear to be legitimate API endpoints
Should I install fueav/bot-trade?
Oathe's verdict for fueav/bot-trade is SAFE with a trust score of 85/100. Recommendation: Install.