LooLoo Trading
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: looloo-trading Version: 0.1.2 The skill bundle defines a legitimate workflow for obtaining cryptocurrency trade quotes and generating confirmation links for the LooLoo trading platform. The instructions in SKILL.md emphasize user confirmation, explicitly state that the tool does not handle private keys or sign transactions, and direct the final execution to the official website (looloo.lol), showing no signs of malicious intent or data exfiltration.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user could receive a trade confirmation link, but the skill requires explicit confirmation first and says final wallet signing happens on the LooLoo website.
Creating a trade intent is a financial workflow action, but the instruction explicitly gates it on user confirmation and does not authorize unattended execution.
Call `create_trade_intent` only after the user explicitly wants to continue.
Before using the confirmation link, verify the token address, side, amount, and website destination, and only sign in the wallet if everything matches your intent.