ClawHub
Back to skill

Security audit

Crypto Price Alerts

Security checks for vulnerabilities and agentic risk

Overview

The skill manages local crypto price alerts in a purpose-aligned way, with minor disclosure gaps but no evidence of hidden or malicious behavior.

Before installing, understand that alerts are stored in a local JSON file under your OpenClaw workspace and price checks contact Binance. Treat the Telegram/Discord notification claims as under-documented unless the publisher explains what data is sent and how accounts are linked.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The README advertises instant notifications via Telegram/Discord but does not disclose that using these channels may require sending alert content, account identifiers, or metadata to third-party services. This can mislead users about privacy expectations and informed consent, especially in a financial-tracking context where watchlists and alert behavior may reveal sensitive investment interests.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
86% confidence
Finding

This markdown file states that alerts are stored locally in a JSON file and that the skill can remove alerts, but it does not warn users that using the skill will write to local storage or delete stored alert entries. For markdown files, user-facing descriptions should disclose behaviors that affect user data or system state.

Content

No source excerpt is available for this finding.

Unpinned Dependencies

Low
Category
Supply Chain
Confidence
89% confidence
Finding

The dependency version for ccxt is specified with a caret range (^4.0.0), which permits automatic installation of newer compatible releases rather than a single fixed version. This can introduce supply-chain risk if a later release contains a vulnerability or malicious code, though by itself it is a common packaging practice and the impact in this file alone is limited.

Content

Scanner excerpt · package.json (reported line 16)May include surrounding context.

json
"keywords": ["crypto", "alerts", "price", "notifications", "trading"],
  "category": "finance",
  "dependencies": {
    "ccxt": "^4.0.0"
  }
}

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

This code creates a directory and writes alert data to ~/.openclaw/workspace/data/price_alerts.json, which affects user data on disk. Although the file contains a top-level description and prints command results, there is no explicit warning, confirmation, or comment disclosing that alerts are being persistently stored in the user's home directory.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

The ccxt Binance client is instantiated and used to fetch ticker data, which causes outbound network requests. The file does not provide an explicit user warning, comment, or usage text indicating that checking alerts contacts an external exchange service.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.