Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed, read-only research helper for public trend and crypto-market lookups, with no evidence of hidden execution, persistence, credential use, or destructive behavior.
Install only if you are comfortable with the agent making public web requests to Tugou and Binance Web3 for crypto research. Treat outputs as research signals, not financial advice, and provide only public wallet or contract addresses unless you intend them to be queried externally.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
openclaw:
requires:
bins:
- curl
emoji: "\U0001F43E"
install:
- id: curl
This section instructs the agent to preserve Chinese original terms by default and avoid converting conclusions into English. That is a language/locale constraint stated as a default behavior, but the document does not offer the user a language choice or make this opt-in.
The workflow says to keep the Chinese original term and not force conversion to English titles, which establishes a preferred output locale. Because the skill is user-invocable and no opt-in or alternative language path is described here, this can violate language-choice policy.
No suspicious patterns detected.