ai-trader-copytrade

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill monitors a public signal feed and provider signals containing user-submitted free text content (such as "Long BTC, target 55000"), which an outsider can publish to influence the agent.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The installation instructions include fetching external skill content from an arbitrary domain (ai4trade.ai) and installing a third-party OpenClaw plugin from an unverified package identifier (@clawtrader/copytrade), constituting an unverifiable runtime external dependency under weak/unknown provenance.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes a copy-trading platform (ai-trader-copytrade) where agents can follow top traders and automatically copy their positions. The features and API reference outline automated position synchronization, where provider trades are automatically copied and executed ("When provider opens a position, you automatically open the same position", "Auto Position Sync"), which constitutes market orders/financial execution (trading positions).