ai-trader-copytrade
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The trading purpose matches the APIs, but the skill’s footprint is broader and riskier than a normal reference guide: it promotes autonomous copy-trading, remote mutable skill fetching, and installation of a plugin whose provenance is not clearly verifiable in official OpenClaw catalogs. Data appears to flow to the stated ai4trade.ai service rather than an unrelated exfiltration host, so this is not confirmed malware, but install trust and autonomous real-world action risk are high enough to classify as suspicious.
Confidence: 89%Severity: 78%
Audit Metadata