compose-copy-trader-setup

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs the agent to ask the user to paste a Polygon EOA private key into chat and then construct shell commands that inline that key (and also references handling the Compose API token), which requires the LLM to receive and output secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This guide contains an explicit credential-exfiltration pattern — it tells the operator/agent to ask the user to paste a funded Polygon EOA private key into chat (and to inline it into a CLI invocation), which would expose sensitive credentials enabling unauthorized access to funds and automated on-chain trades; aside from that dangerous instruction there are no obfuscated payloads, reverse shells, or hidden RCE/backdoor constructs in the text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform on-chain trading: it requires a funded Polygon EOA PRIVATE_KEY, directs the user to fund the EOA with USDC.e, instructs creating token approvals, references signing CLOB orders and executing trades (copy_trade task executes mirror trades and logs TRADE_EXECUTED), and includes on-chain interactions and approvals. These are specific crypto/blockchain financial execution capabilities.