senpi-strategy-ops

SUSPICIOUS: the skill’s capabilities mostly match its stated purpose, but that purpose itself is high-impact live trading. Main concerns are autonomous financial actions and reliance on an externally installed, unpinned runtime plugin that receives auth-backed operations; data flows otherwise look consistent with Senpi/OpenClaw strategy management rather than obvious credential harvesting.

No overt malware behavior (exfiltration/backdoor/reverse shells/persistence) is evident in the provided fragment. However, the module performs a high-impact supply-chain action: it discovers and downloads arbitrary blob content from a specified GitHub repo/ref under strategies/<strategy_id>/ and writes those bytes to local disk with only a location-based traversal guard (dest_root escape prevention) and no integrity/authenticity verification. If attacker influence exists over repo/ref/strategy_id or the upstream content, this can enable malicious payload delivery via the persisted files.