Is crypto-signals-router@1.0.0 safe to install?

Skills/ClawHub/crypto-signals-router

crypto-signals-router@1.0.0

VERIFIED· install only

Publisher claims: "Routes to the appropriate agent in the crypto-signals-plugin team. Trigger when the user asks about crypto trade signals, market analysis, price data, crypto news sentiment, Telegram channel publishing, x402 wallet management, signal performance, or anything related to running an automated crypto signals operation. Lean toward delegation — if crypto signals, market data fetching, news analysis, x402 payments for APIs, or Telegram channel management is any part of the task, route it to the appropriate agent below." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher vizionik25 · publishing for 107 daysInstalls 540Last detonated 4d ago

$clawhub install crypto-signals-router

Watch Report an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.

Tested: every file read, file written and host contacted by what ran
Not tested: use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-10 and scored it 83/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

0.0sprocessno install scripts to re-run

Static findings

MEDIUM

File type combined with upload actionSKILL.md:158 · File type combined with upload action — agent may exfiltrate local data files| `trade-signal.json` | Latest signal output from signal-forge |Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

HIGH

Access to sensitive file pathsSKILL.md:132 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesnano ~/.gemini/config/plugins/crypto-signals-plugin/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Privileged sudo commandSKILL.md:100 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl enable --now crypto-signals-watchdog.timerFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.

AST05

HIGH

Privileged sudo commandSKILL.md:99 · Privileged sudo command — agent may execute with elevated privileges

sudo cp ~/.gemini/config/plugins/crypto-signals-plugin/config/crypto-signals-watchdog.{service,timer} /etc/systemd/system/

Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.

AST05

Cost to the agent

Instructions loaded

≈1,667 tok

1 file · 2 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.