Security checks across malware telemetry and agentic risk
This automated trading skill has real financial authority plus under-disclosed external messaging, exposed secrets, and unsafe code paths that need review before installation.
Do not install this as-is for a funded wallet. Only consider it after removing hardcoded Telegram credentials, rotating exposed secrets, deleting wallet_backup.txt, replacing eval with safe parsing, disabling or isolating Chrome DevTools/browser automation, and verifying exactly which trading strategy and background watchdog processes will run.
if events and events[0].get('markets'):
markets = events[0]['markets']
if markets:
token_ids = eval(markets[0].get('clobTokenIds', '[]'))
if token_ids:
# UP = token_ids[0], DOWN = token_ids[1]
token_id = str(token_ids[0] if direction == "UP" else token_ids[1])if events and events[0].get('markets'):
markets = events[0]['markets']
if markets:
token_ids = eval(markets[0].get('clobTokenIds', '[]'))
if len(token_ids) >= 2:
return str(token_ids[0]), str(token_ids[1]) # UP, DOWN
except:print("📡 开始推送日志...\n")
# 实时读取进程输出
proc = subprocess.Popen(
['tail', '-f', f'/proc/{pid}/fd/1'],
stdout=subprocess.PIPE,
stderr=subprocess.PIPE,if events and events[0].get('markets'):
markets = events[0]['markets']
if markets:
token_ids = eval(markets[0].get('clobTokenIds', '[]'))
if token_ids:
# UP = token_ids[0], DOWN = token_ids[1]
token_id = str(token_ids[0] if direction == "UP" else token_ids[1])if events and events[0].get('markets'):
markets = events[0]['markets']
if markets:
token_ids = eval(markets[0].get('clobTokenIds', '[]'))
if len(token_ids) >= 2:
return str(token_ids[0]), str(token_ids[1]) # UP, DOWN
except:66/66 vendors flagged this skill as clean.