Skills/ClawHub/thetaedge-skill

thetaedge-skill@0.0.1

CAUTION· install only

Publisher claims: "ThetaEdge is an Options Intelligence Platform that empowers better trading decisions. Use this skill for any finance, investing, or trading related tasks. Su..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher mempko · publishing for 171 daysInstalls 703Last detonated 38 min ago
What would fix thisWatchDispute verdict

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-14 and scored it 68/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Reads credential paths from the home directory; Privileged sudo command. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessinstall script run in the sandbox
0.2sprocessexited 1: EOFError
0.2sprocessscript backend runs setup only
0.2sprocessscript backend runs setup only
0.3sprocesssecond launch, clock +45 days, CI unset
0.5sprocessexited 1: EOFError

Static findings

HIGH
Access to sensitive file pathsscripts/setup-openclaw-vm.sh:147 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filestouch ~/.openclaw/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
CRITICAL
Reads credential paths from the home directoryscripts/setup-openclaw-vm.sh:107 · Reads credential paths from the home directory# The OpenClaw installer sets an npm prefix in ~/.npmrc which conflictsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03
HIGH
Privileged sudo commandscripts/setup-openclaw-vm.sh:47 · Privileged sudo command — agent may execute with elevated privilegessudo apt install -y curl git ufwFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsscripts/setup-openclaw-vm.sh:157 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileswarn "No API key entered. You can add it later to ~/.openclaw/.env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/setup-openclaw-vm.sh:158 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileswarn " echo 'ANTHROPIC_API_KEY=sk-...' >> ~/.openclaw/.env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandscripts/install.py:273 · Privileged sudo command — agent may execute with elevated privileges" Ubuntu: sudo apt install git\n"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
References a credential file in the home directoryscripts/setup-openclaw-vm.sh:109 · References a credential file in the home directoryif [ -f "$HOME/.npmrc" ] && grep -q "prefix=" "$HOME/.npmrc"; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03
HIGH
Access to sensitive file pathsscripts/setup-openclaw-vm.sh:160 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho "ANTHROPIC_API_KEY=$ANTHROPIC_API_KEY" >> ~/.openclaw/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandscripts/setup-openclaw-vm.sh:44 · Privileged sudo command — agent may execute with elevated privilegessudo apt update && sudo apt upgrade -yFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
CRITICAL
Pipe-to-shell patternscripts/setup-openclaw-vm.sh:105 · Pipe-to-shell pattern — downloads and immediately executes remote codecurl -fsSL https://openclaw.ai/install.sh | bash || trueFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
HIGH
References a credential file in the home directoryscripts/setup-openclaw-vm.sh:107 · References a credential file in the home directory# The OpenClaw installer sets an npm prefix in ~/.npmrc which conflictsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03
HIGH
Privileged sudo commandscripts/setup-openclaw-vm.sh:67 · Privileged sudo command — agent may execute with elevated privilegessudo ufw default deny incomingFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File permission modification commandscripts/doctor.py:182 · File permission modification command — agent changes file ownership/permissionsf"Run: chmod 600 {cfg}",Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
References a credential file in the home directoryscripts/setup-openclaw-vm.sh:111 · References a credential file in the home directoryrm -f "$HOME/.npmrc"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03
MEDIUM
File permission modification commandscripts/install-thetix-skill.sh:141 · File permission modification command — agent changes file ownership/permissionschmod 600 "$OPENCLAW_CONFIG"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
Privileged sudo commandscripts/doctor.py:67 · Privileged sudo command — agent may execute with elevated privileges"Install: brew install git / sudo apt install git / https://git-scm.com",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsscripts/setup-openclaw-vm.sh:148 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileschmod 600 ~/.openclaw/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandscripts/setup-openclaw-vm.sh:56 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl enable --now sshFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Direct script execution from GitHub raw URLscripts/setup-openclaw-vm.sh:87 · Direct script execution from GitHub raw URL — unverified code sourcecurl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bashFix: Pin versions and sources; vendor anything fetched at install time.
AST06
CRITICAL
Pipe-to-shell patternscripts/setup-openclaw-vm.sh:87 · Pipe-to-shell pattern — downloads and immediately executes remote codecurl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bashFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
MEDIUM
File permission modification commandscripts/setup-openclaw-vm.sh:146 · File permission modification command — agent changes file ownership/permissionschmod 700 ~/.openclawFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Remote installer piped to shellscripts/setup-openclaw-vm.sh:87 · Remote installer piped to shellcurl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bashFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
MEDIUM
Python subprocess execution detectedscripts/lib/common.py:205 · Python subprocess execution detectedreturn subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File permission modification commandscripts/setup-openclaw-vm.sh:148 · File permission modification command — agent changes file ownership/permissionschmod 600 ~/.openclaw/.envFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Remote installer piped to shellscripts/setup-openclaw-vm.sh:105 · Remote installer piped to shellcurl -fsSL https://openclaw.ai/install.sh | bash || trueFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07

Cost to the agent

Instructions loaded
≈4,033 tok
2 files · 13 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

12 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Reads credential paths from the home directory≈ +9 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  2. Pipe-to-shell pattern≈ +9 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  3. Unclaimed publisher≈ +8 on the totalClaim mempko: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  4. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  5. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  6. References a credential file in the home directory≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim mempkoPropose a patch to the maintainer