Skills/ClawHub/aicoin-freqtrade

aicoin-freqtrade@3.5.4

BLOCKED· static only

Publisher claims: "Use when user asks about Freqtrade — strategy creation, backtest, hyperopt, switching strategies / pairs / dry-run mode, querying live bot status / balance /..." Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher procaross · publishing for 178 daysInstalls 1,283Last detonated 15 min ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-15 and scored it 49/100 (Blocked). Do not install it: the sandbox observed behaviour consistent with credential theft, exfiltration or persistence. Notable findings: Access to sensitive file paths; Access to sensitive file paths; Access to sensitive file paths. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
Access to sensitive file pathsscripts/ft.mjs:162 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileswarning: dry_run ? null : '⚠️ 已切到实盘 — 真实交易, 真实亏损. 确认 .env 里的交易所 key 是对的, 余额可控.',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/aicoin_data.py:81 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- Auto-loads the API key from .env files.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/aicoin_data.py:101 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesPath.home() / '.openclaw' / 'workspace' / '.env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/coinclaw-env.mjs:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenvFile: '/home/node/.openclaw/workspace/.env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/coinclaw-env.mjs:60 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_cached = { ...env, ftApiUser: 'freqtrade', ftApiUrl: 'http://127.0.0.1:8080' };Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/freqtrade-api.mjs:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// FREQTRADE_USERNAME / FREQTRADE_PASSWORD. 用户也可以通过 .env 覆盖.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ft-deploy.mjs:110 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// 在三引擎容器里 .env 同时承载交易所 key + AiCoin key + DRY_RUN +Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Process kill commandscripts/ft.mjs:37 · Process kill command — agent can terminate processes// 重启 freqtrade daemon. 优先 supervisorctl (cleanest), 退到 kill 让Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsSKILL.md:145 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesac = AiCoinData(cache_ttl=300) # 自动从 .env 读 key，内置 5 分钟缓存Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/freqtrade-api.mjs:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// 在容器外(用户本地 macOS / Linux), 退到 .env 里读 — 走老的 host 模式,Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/coinclaw-env.mjs:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenvFile: '/workspace/.env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ft-deploy.mjs:376 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif (!checks.exchange?.configured) checks.missing.push('No exchange API keys in .env');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Remote installer piped to shellscripts/ft-deploy.mjs:208 · Remote installer piped to shellrun('curl -LsSf https://astral.sh/uv/install.sh | sh', { timeout: 60000 });Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
HIGH
Access to sensitive file pathsSKILL.md:308 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files`.env` 自动加载顺序:Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ft-deploy.mjs:426 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesthrow new Error('No exchange API keys found in .env (required for live trading)');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Process kill commandscripts/ft.mjs:50 · Process kill command — agent can terminate processes// 2) 退到 kill freqtrade pid. supervisord autorestart=true / unexpectedFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Process kill commandSKILL.md:297 · Process kill command — agent can terminate processes| `restart` | 重启 freqtrade daemon (supervisorctl + kill 兜底) |Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsscripts/ft-deploy.mjs:411 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files? '⚠️ 已切到实盘 — 真实交易, 真实亏损. 确认 .env 里交易所 key 正确, 余额可控.'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ft-deploy.mjs:767 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…://www.aicoin.com/opendata → add AICOIN_ACCESS_KEY_ID & AICOIN_ACCESS_SECRET to .env.`; } return result; }, // ── strategy_list ──────────────────────…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
CRITICAL
Pipe-to-shell patternscripts/ft-deploy.mjs:208 · Pipe-to-shell pattern — downloads and immediately executes remote coderun('curl -LsSf https://astral.sh/uv/install.sh | sh', { timeout: 60000 });Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
HIGH
Access to sensitive file pathsSKILL.md:69 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- ❌ 用户说"切实盘", 你不列 .env key / 余额 / 风险就直接 `set_dry_run {"dry_run":false}`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/freqtrade-api.mjs:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// 这个 helper 自动从那里读 — agent / skill 不需要在 .env 里再配Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/ft.mjs:149 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// 启动时从 .env 自动 patch 进去).Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/aicoin_data.py:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesac = AiCoinData() # auto-loads API key from .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/aicoin_data.py:102 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesPath.home() / '.openclaw' / '.env'):Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/freqtrade-api.mjs:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// ft-deploy.mjs deploy 时把 FREQTRADE_PASSWORD 写到 .env.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/coinclaw-env.mjs:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenvFile: '/workspace/.env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/freqtrade-api.mjs:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// Auto-load .env files (CoinClaw 容器优先 /workspace/.env 或 OpenClaw 的等价路径).Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathslib/coinclaw-env.mjs:5 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// 三引擎的 workspace / userdir / strategy-path / config.json / .env 都Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:310 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- coinclaw 容器内: `/workspace/.env` (Hermes/CC) 或 `/home/node/.openclaw/workspace/.env` (OpenClaw)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
CRITICAL
Pipe-to-shell patternscripts/ft-deploy.mjs:237 · Pipe-to-shell pattern — downloads and immediately executes remote code…essage}`); } } throw new Error('Python 3.11+ required. Install options:\n• curl -LsSf https://astral.sh/uv/install.sh | sh && uv python install 3.12\n• brew install [email protected]\n• https://www.python.org…Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
HIGH
Access to sensitive file pathslib/aicoin_data.py:100 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfor f in (Path.cwd() / '.env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Remote installer piped to shellscripts/ft-deploy.mjs:237 · Remote installer piped to shell…essage}`); } } throw new Error('Python 3.11+ required. Install options:\n• curl -LsSf https://astral.sh/uv/install.sh | sh && uv python install 3.12\n• brew install [email protected]\n• https://www.python.org…Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07

Cost to the agent

Instructions loaded
≈3,620 tok
1 file · 14 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

31 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Pipe-to-shell pattern≈ +9 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  2. Unclaimed publisher≈ +8 on the totalClaim procaross: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  4. Process kill command≈ +2 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  5. Remote installer piped to shell≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim procarossPropose a patch to the maintainer