ClawHub
Back to skill

Security audit

Orderly Sdk Trading Workflows

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only trading workflow guide; its financial actions are sensitive but clearly aligned with its stated purpose.

Install this only if you intend to build Orderly DEX trading features. Before using it with real funds, add clear confirmations, previews, token and chain checks, amount limits, leverage warnings, testnet or small-amount testing, and controls to disable or restrict automated trading behavior.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill provides end-to-end instructions for deposits, trading, position management, and withdrawals but does not include any prominent warning that these actions can cause real financial loss, liquidation, or irreversible asset movement. In a trading workflow skill, omission of user-facing risk disclosures can lead downstream agents or developers to present dangerous financial actions too casually or automate them without sufficient confirmation.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The withdrawal section shows how to initiate withdrawals but omits a warning that withdrawals move funds off-platform and may be irreversible if the wrong token, chain, or destination context is used. Because this skill concerns real asset transfers, missing verification guidance materially increases the chance of permanent fund loss from user or integrator error.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The leverage management section explains how to change leverage but does not warn that higher leverage amplifies losses and increases liquidation risk. In the context of perpetual trading, this omission is dangerous because it can encourage unsafe defaults or casual leverage adjustments without communicating the severity of downside risk.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.