krexa@1.5.1

CAUTION

Publisher claims: "Use this skill when the user wants to research a trading idea, or turn an idea, post, reel or video into a tested strategy and deploy it as a live trading agent on Krexa. Covers Solana spot and tokenized stocks (xStocks), perps (Hyperliquid, Jupiter Perps, Polymarket Perps), Polymarket prediction markets, and perps in the user's own Binance, Bybit, OKX, Kraken or Coinbase account. Krexa runs the research, backtests and agents on its own servers and enforces trading limits in code. The key can ask for a deploy but cannot move money; the user approves every live deploy in the Krexa app." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher krexa · joined 2 days agoInstalls 249Last detonated 27 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsSKILL.md:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandreferences/setup.md:27 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

File permission modification commandreferences/setup.md:41 · File permission modification command — agent changes file ownership/permissions

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)references/setup.md:48 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

CRITICAL

Access to sensitive file pathsreferences/setup.md:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/setup.md:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05