Security audit
Claude AI Trading Skill
Security checks across malware telemetry and agentic risk
Overview
The skill is a coherent Elfa API integration, but it can run curl calls and use an API key or x402 wallet payments, so users should review credentials and costs.
Before installing, be comfortable with the agent making Elfa API requests, using ELFA_API_KEY from the environment, and potentially using x402 paid requests if you configure that mode. Do not paste API keys into chat, confirm any wallet/payment setup separately, and verify costs and endpoint behavior against official Elfa documentation.
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.