Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Multi-Agent Trading Debate

v1.0.1

Multi-agent trading debate framework for collective market decision-making. Use when a trading signal is detected or a position decision is needed. Triggers...

0· 78·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's purpose is to run a debate and notify/coordinate via Feishu and produce execution decisions. SKILL.md and references explicitly instruct sending messages to a Feishu group and posting execution commands to agent handles, but the registry metadata lists no required credentials or API tokens (no FEISHU_TOKEN/APP_ID/APP_SECRET). That is inconsistent: sending messages to Feishu normally requires credentials. Also the SKILL.md key-file paths (regime/detector.py, risk/position_sizer.py) do not match the actual file locations (scripts/regime_detector.py, scripts/position_sizer.py), which suggests sloppy packaging or incomplete integration.
!
Instruction Scope
Runtime instructions ask the agent to: send debate batches to a Feishu trading group, collect analyst responses, synthesize verdicts, execute orders (via @trading-execution), and write prediction logs (data/predictions.jsonl). The instructions do not show how Feishu or execution APIs are authorized, and they reference specific paths and files that don't match the provided scripts. Instructions imply network communication and potential triggering of executions but no code in the package performs API calls — leaving ambiguity about how messages/orders would be sent and who/what has authority to execute them.
Install Mechanism
This is instruction-only with two small Python scripts included; there is no install spec, no external downloads, and nothing is written to disk by an installer. That reduces supply-chain risk. The scripts optionally import numpy but do not automatically install it.
!
Credentials
The skill declares no required environment variables or primary credential, yet its workflow depends on an external Feishu group ID (hardcoded in references/feishu_format.md) and on sending messages and execution commands. The lack of declared tokens/credentials is disproportionate to the stated capability. Also, the hardcoded Feishu group ID is present in the package (may be sensitive), and the scripts' behavior can change based on availability of numpy (no install specified).
Persistence & Privilege
The skill does not request always:true or other elevated persistence. It writes/reads local prediction and TCA log files per SKILL.md; otherwise it does not modify other skills or global agent settings. Autonomous invocation is allowed by default but not combined here with other high privileges.
What to consider before installing
This package looks like a draft integration for team debate and trading coordination, but there are important inconsistencies you should resolve before using it with real funds or credentials: - Clarify Feishu integration: ask the author how Feishu messages and execution commands are actually sent. If the skill will post to Feishu or call an execution API, it must declare the required credentials (app id/secret or bot token) and show the code that uses them. - Do not provide any API keys or exchange credentials until you confirm who runs the network calls and whether human approval is required for execution. The SKILL.md implies order execution via an @trading-execution handle; confirm whether that is manual or automated. - Fix file/path mismatches: SKILL.md references regime/detector.py and risk/position_sizer.py but the package has scripts/regime_detector.py and scripts/position_sizer.py. Ensure the runtime instructions point to the actual code you reviewed. - Review hardcoded identifiers: the Feishu group ID is embedded in references/feishu_format.md. Confirm that ID belongs to your organization and that posting to it is acceptable. - Dependency behavior: the regime detector falls back to a simulated mode if numpy is unavailable; decide whether simulation is acceptable or whether numpy should be installed in a controlled environment. - Run the included scripts in a sandbox (no network, test data) to verify they only perform local computations and to confirm there are no hidden network calls. If you plan to enable real messaging/execution, require explicit opt-in and least-privilege credentials, and add logging/auditing and manual approval steps. Given these gaps, treat the skill as untrusted until the author provides a clear explanation of how external messaging and order execution are authorized and implemented, and until the packaging/path issues are fixed.

Like a lobster shell, security has layers — review code before you run it.

agentsvk97es3dhvngh67hf9pe35dw9y183v22rfeishuvk9726p6as9fmwz0ak3bq37e0d183tq0nlatestvk9726p6as9fmwz0ak3bq37e0d183tq0nmulti-agentvk9726p6as9fmwz0ak3bq37e0d183tq0ntradingvk9726p6as9fmwz0ak3bq37e0d183tq0n

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments