Security audit
AI Agent Trading on DEX
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed guide for setting up a crypto trading bot, with expected but high-impact financial API-key steps and clear safety warnings.
Install only if you intend to configure automated crypto trading. Verify the Freqtrade source before running Docker commands, use dry-run mode first, never enable withdrawal permissions on exchange API keys, keep .env files out of git, and understand that even correctly configured trading bots can lose money.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.