ClawHub
Back to skill

Security audit

Weex Trading

Security checks across malware telemetry and agentic risk

Overview

This documentation-only trading skill is transparent about using a Telegram bot, but it asks users to send live exchange API credentials to an unverified bot that can place real trades.

Review carefully before installing. Do not send exchange API credentials to this Telegram bot unless you have independently verified the operator and trust it with trading access. If used at all, create a restricted spot-only key with withdrawals disabled, use IP restrictions if Weex supports them, keep balances small, and require manual confirmation before any live order or strategy.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The trigger list is broad enough to match generic crypto-related requests such as 'buy bitcoin' or 'check price', which can cause this trading skill to activate in situations where a user may only want information, not trade execution tooling. In a financial automation context, unintended invocation is more dangerous because it can steer an agent toward portfolio access, API-key handling, or automated strategy setup.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill presents automated trading commands and strategy setup without a prominent warning about financial loss, market volatility, or the consequences of autonomous execution. In this context, omission of risk disclosure increases the chance that users or agents initiate trades without understanding that real funds may be committed repeatedly via DCA or grid strategies.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The reference documents authenticated balance, order placement, and order-cancellation endpoints, including destructive operations, without any explicit warning about financial loss, irreversible trade execution, or the need for user confirmation. In the context of an agent skill designed to automate crypto trading, this omission increases the risk that an agent or integrator treats these endpoints as routine actions and triggers real account-impacting operations without sufficient safeguards.

VirusTotal

No VirusTotal findings

View on VirusTotal

Static analysis

No suspicious patterns detected.