Back to skill
Skillv1.0.0
VirusTotal security
股票交易下单买卖和查询。 · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 6, 2026, 7:26 AM
- Hash
- 6f5eac0dcf166c54774b2dd6d63720b106abaf7afeb1fd18aee0eb87a75f3d84
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: stock-auto-trade Version: 1.0.0 The skill facilitates automated stock trading by sending HTTP requests via `curl` to a local API service (`localhost:8888`). While its behavior is aligned with the stated purpose, it is classified as suspicious due to the high-risk nature of financial transactions and its explicit dependency on external software from `https://www.gp998.com`. Additionally, the documentation in `SKILL.md` uses a hardcoded test API key (`test-api-key-12345`), which could lead to insecure user configurations.
- External report
- View on VirusTotal