Skills/ClawHub/nexustrader

nexustrader@1.0.5

CAUTION· install only

Publisher claims: "NexusTrader trading assistant. Query crypto balances, positions, prices, and place orders on Binance, Bybit, OKX, Bitget, HyperLiquid." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher quantweb3-scott · publishing for 235 daysInstalls 968Last detonated 2 h ago
What would fix thisWatchDispute verdict

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-15 and scored it 74/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Access to sensitive file paths; Access to sensitive file paths. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessinstall script run in the sandbox
0.0sprocessexited 2: ./install.sh: line 22: set: pipefail : invalid option name
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.1sprocesssecond launch, clock +45 days, CI unset
0.1sprocessexited 2: ./install.sh: line 22: set: pipefail : invalid option name

Static findings

HIGH
Access to sensitive file pathsbridge.py:174 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesin the skill's .env file (~/.openclaw/skills/nexustrader/.env).Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- "Auto-start is DISABLED by default (NEXUSTRADER_NO_AUTOSTART=1). Set to 0 in .env to enable."Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- "Reads .env and .keys/.secrets.toml from local NexusTrader-mcp project directory"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsbridge.py:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Auto-load .env from skill directory (placed there by `nexustrader-mcp setup`)."""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
CRITICAL
Pipe-to-shell patterninstall.sh:187 · Pipe-to-shell pattern — downloads and immediately executes remote codeecho " curl -LsSf https://astral.sh/uv/install.sh | sh"Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
HIGH
Access to sensitive file pathsbridge.py:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_file = Path(__file__).resolve().parent / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsbridge.py:187 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"如需允许自动启动，在 ~/.openclaw/skills/nexustrader/.env 中设置：\n"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **Auto-start is disabled by default.** The skill will not start background processes unless you explicitly set `NEXUSTRADER_NO_AUTOSTART=0` in the skill's `.env` file.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsnexustrader_daemon.sh:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesENV_FILE="${SCRIPT_DIR}/.env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedbridge.py:139 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathsinstall.sh:325 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"Reads .env and .keys/.secrets.toml from NexusTrader-mcp project directory",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Remote installer piped to shellinstall.sh:187 · Remote installer piped to shellecho " curl -LsSf https://astral.sh/uv/install.sh | sh"Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
HIGH
Access to sensitive file pathsnexustrader_daemon.sh:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Load .env to get PROJECT_DIRFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈1,085 tok
1 file · 7 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

6 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Pipe-to-shell pattern≈ +9 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  2. Unclaimed publisher≈ +8 on the totalClaim quantweb3-scott: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  4. Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  5. Remote installer piped to shell≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim quantweb3-scottPropose a patch to the maintainer