Security checks across malware telemetry and agentic risk
This is a coherent ChainUp trading skill, but it can use API keys for real trades/transfers and includes a documented confirmation bypass.
Install only if you intend to let an agent use ChainUp/OpenAPI V2 credentials for account queries and live trading. Use least-privilege API keys, avoid passing secrets on the command line, verify the base URL and credential source, and do not allow --no-confirm-gate on live accounts unless you deliberately accept the risk.
- Any action that affects balances, even if it may not fill immediately, is still treated as a live balance-changing action. This includes but is not limited to limit orders, batch orders, cancellations, transfers, margin orders, and margin cancellations. - Query actions can execute directly, including but not limited to balance queries, order queries, trade history queries, market data queries, and open-order queries. - Precision prechecks are mandatory before order confirmation so the script does not send prices or quantities that exceed symbol precision to the live gateway. - If the user explicitly requests to bypass confirmation, `--no-confirm-gate` may be used. This is high risk and should only be used with explicit user authorization. - Never print full credentials in the terminal or reply. If the script throws an error that could expose secrets, summarize the failure rather than copying the raw sensitive output. ## Examples
64/64 vendors flagged this skill as clean.
