Trading
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: trading Version: 1.0.1 The skill bundle is benign. All file operations, specifically `mkdir -p ~/trading` and `touch ~/trading/{memory.md,journal.md,progress.md}` in `memory-template.md` and `setup.md`, are confined to the explicitly declared `~/trading/` directory. The `SKILL.md` file contains strong guardrails and explicit 'ONLY/NEVER' statements that limit the agent's actions to educational content and prevent it from giving financial advice or executing trades. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection attempts designed to subvert the agent's intended purpose.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the user records real trading behavior, risk preferences, or journal details, that information may remain on disk and be reused in later interactions.
The skill creates or uses persistent local files that may contain trading preferences, progress, and journal notes. This is purpose-aligned and scoped, but it is reusable context.
Memory lives in `~/trading/` with learning progress tracking. ... memory.md # Preferences, trading style, focus areas ... journal.md # Trade journal for review
Use the optional memory only if desired, avoid storing broker credentials or highly sensitive account details, and periodically review or delete files under `~/trading/`.
A future agent may continue tailoring responses based on saved trading-learning context even when the user did not explicitly restate it.
The skill suggests adding trading-learning context to broader agent/user files, which can affect future sessions outside the immediate skill invocation.
If user has a main `AGENTS.md` or `USER.md`, consider adding: ... ## Trading Education ... This helps the agent tailor content across sessions.
Only add broad agent memory entries if you want cross-session personalization, and keep them general rather than including detailed finances or active positions.