Skills
Navigate
skills/kaushal-205/clawlogic/clawlogic-trader/Gen Agent Trust Hub

clawlogic-trader

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches and runs the @clawlogic/sdk and tsx packages via npx from the npm registry. These are vendor-controlled resources used for protocol interaction.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests market descriptions that could contain malicious instructions.
  • Ingestion points: Market data is retrieved in scripts/helpers/analyze-market.ts.
  • Boundary markers: No explicit delimiters are used to separate market descriptions from system instructions.
  • Capability inventory: The skill provides tools for on-chain trading and market resolution.
  • Sanitization: Untrusted market descriptions are processed without sanitization.
  • [COMMAND_EXECUTION]: The skill executes shell and TypeScript scripts to perform on-chain actions, involving the use of the AGENT_PRIVATE_KEY for signing.
  • [DYNAMIC_EXECUTION]: The skill utilizes npx tsx for executing its TypeScript helpers at runtime and uses dynamic imports for TEE functionality in scripts/helpers/tee-attest.ts.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 04:58 AM