Security checks across malware telemetry and agentic risk
The skill performs the advertised Hummingbot price-comparison task, but users should be careful with its remote prerequisite command and API credential handling.
Install only if you intend to use it with a trusted Hummingbot API. Inspect or avoid the remote prerequisite command, use a strong API password instead of admin/admin, keep the API bound to localhost or HTTPS on a trusted network, and run the script from a directory where its documented .env fallback will not pick up unrelated secrets.
def load_env():
"""Load environment from .env files."""
for path in ["hummingbot-api/.env", os.path.expanduser("~/.hummingbot/.env"), ".env"]:
if os.path.exists(path):
with open(path) as f:def load_env():
"""Load environment from .env files."""
for path in ["hummingbot-api/.env", os.path.expanduser("~/.hummingbot/.env"), ".env"]:
if os.path.exists(path):
with open(path) as f:
for line in f:def load_env():
"""Load environment from .env files."""
for path in ["hummingbot-api/.env", os.path.expanduser("~/.hummingbot/.env"), ".env"]:
if os.path.exists(path):
with open(path) as f:
for line in f:def load_env():
"""Load environment from .env files."""
for path in ["hummingbot-api/.env", os.path.expanduser("~/.hummingbot/.env"), ".env"]:
if os.path.exists(path):
with open(path) as f:
for line in f:65/65 vendors flagged this skill as clean.