VibeTrader

• Analyzed: May 12, 2026, 3:11 AM
• Findings: 1
• Version: 1.0.2
• Hash: 9f1049b5f1ed2629d68b767f382556d473997b20b5cfe7c669828db42357a702
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for VibeTrader is classified as benign. All files consistently describe a skill for managing AI-powered trading bots, requiring a `VIBETRADER_API_KEY` and connecting to a specific external service endpoint (`https://vibetrader-mcp-289016366682.us-central1.run.app`). There is no evidence of malicious prompt injection in `SKILL.md` or `README.md`, nor any attempts at data exfiltration, malicious execution, persistence, or obfuscation. The requested permissions and network access are directly aligned with the stated purpose of interacting with a trading platform.