Skills/ClawHub/mt5-httpapi

mt5-httpapi@4.31.1

CAUTION

Publisher claims: "HTTP client for a user-deployed mt5-httpapi MetaTrader 5 bridge. Use ONLY when the user has explicitly installed and configured mt5-httpapi AND provided MT5_API_URL. Read endpoints (account, symbols, rates, ticks, server-side technical-analysis enrichment via the wickworks sidecar, history, backtest report fetching) are safe to invoke. Trade-mutating endpoints on /orders and /positions require explicit per-action confirmation showing symbol, side, volume, and SL/TP; terminal shutdown/restart also require explicit confirmation naming the target terminal and operation. Creating, changing or deleting a chart deployment (/deployments) or closing a chart starts or stops a live EA and needs the same confirmation. Never invoke mutations on inferred intent. Do not use this skill for generic market-data, charting, or trading questions where the user hasn't named mt5-httpapi." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher psyb0t · joined 2 days agoInstalls 5,623Last detonated 43 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsSKILL.md:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionreferences/setup.md:147 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
URL using raw IP addressreferences/setup.md:58 · URL using raw IP address — may bypass domain-based filtering
AST07
CRITICAL
Access to sensitive file pathsSKILL.md:60 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Privileged sudo commandreferences/setup.md:166 · Privileged sudo command — agent may execute with elevated privileges
AST05
HIGH
Outbound HTTP to raw IP addressreferences/setup.md:58 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07