Tradebot Ops

• Outcome: Review
• Latest audit: May 28, 2026 at 11:17 AM UTC
• Version:
  1.0.0

Overview

The skill is coherent for trading-bot operations, but it can direct an agent to stop and restart a potentially live trading bot without clear user approval or tight limits.

Install only if you are comfortable with an agent diagnosing and potentially restarting your trading bot. Before using it, require explicit approval before any stop, clear, or restart action; limit it to a known bot and environment; and check live mode, open positions, and open orders before allowing changes.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill instructs the agent to stop the bot PID and restart it when the system appears stale, but it does not require explicit user confirmation or even a clear warning before performing a potentially disruptive action. In a live trading context, an unconfirmed restart can interrupt active strategies, interfere with position management, or cause operational mistakes if the stale-state diagnosis is wrong.

VirusTotal

65/65 vendors flagged this skill as clean.