ai-trader-copytrade

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The trading purpose matches the APIs, but the skill’s footprint is broader and riskier than a normal reference guide: it promotes autonomous copy-trading, remote mutable skill fetching, and installation of a plugin whose provenance is not clearly verifiable in official OpenClaw catalogs. Data appears to flow to the stated ai4trade.ai service rather than an unrelated exfiltration host, so this is not confirmed malware, but install trust and autonomous real-world action risk are high enough to classify as suspicious.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Sep 18, 2026, 07:20 AM
Package URL
pkg:socket/skills-sh/hkuds%2Fai-trader%2Fai-trader-copytrade%2F@9abca09d3041420035c0603fe4127356df2b9e2f2f640a4c1b2492203534588c