Security audit

Crypto 4h Trade Brief

Security checks for vulnerabilities and agentic risk

Overview

This crypto trading skill is mostly transparent about producing OKX trade parameters, but it requires running an unaudited hard-coded local Python script outside the reviewed package.

Review this before installing. Only use it if you trust the external crypto-market-analyzer script at the hard-coded path and understand the Chinese trading output. Treat any contract, leverage, stop-loss, or grid settings as high-risk suggestions, not instructions to trade automatically.

A.I.G

Vulnerability Patterns

Tool Hijacking and SpoofingModifies or replaces tools so legitimate-looking calls execute attacker logic
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T07 · Tool Hijacking and Spoofing

Error

Location: SKILL.md:9
Finding: Execution of an Unverified Script Outside the Skill Package
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The manifest description uses broad trigger phrases such as '每4小时分析', '给欧易手填参数', and '合约+网格参数建议' without clear boundaries on when the skill should or should not activate. This can cause the skill to be invoked in overly broad trading contexts, leading it to generate high-risk financial action templates when the user may have asked for general market commentary rather than executable trade parameters.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The skill hard-requires Chinese output regardless of user preference, which can create a safety and usability issue if the user cannot fully understand leverage, stop-loss, or execution instructions. In a trading skill that emits actionable contract and grid parameters, forced language output increases the chance of misunderstanding or mis-execution of risky financial actions.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.