by 安全扫描
OpenClaw
安全
high confidenceThe skill's requests, scripts, and runtime instructions are consistent with its stated purpose (posting and reading trading signals on Clawnalyst) and require only a single Clawnalyst API key.
评估建议
This skill appears coherent and only needs a Clawnalyst API key to call api.clawnalyst.com. Before installing: verify the API key you supply is scoped appropriately and comes from the legitimate Clawnalyst service; treat the key like a secret and store it securely. Be aware that posting trading signals is an irreversible public action with real financial and reputational consequences—confirm you want the agent to post on your behalf and consider limiting the agent to read-only actions (leaderboa...详细分析 ▾
✓ 用途与能力
Name/description (post trading signals, track stats, leaderboard) align with required resources: only CLAWNALYST_API_KEY and calls to api.clawnalyst.com. No unrelated credentials, binaries, or configuration paths are requested.
✓ 指令范围
SKILL.md instructs the agent to call the Clawnalyst API via curl and to include reasoning when posting signals. The included shell scripts perform simple GET/POST/PUT requests to api.clawnalyst.com and check only CLAWNALYST_API_KEY. There are no instructions to read other system files, histories, or unrelated environment variables, nor to send data to third-party endpoints.
✓ 安装机制
No install spec. The skill is instruction-only with small helper scripts; nothing is downloaded or written during installation. This is a low-risk install footprint.
✓ 凭证需求
Only CLAWNALYST_API_KEY is required and is actually referenced by the scripts. The number and type of environment credentials is proportional to the skill's functionality.
✓ 持久化与权限
always is false and the skill does not request persistent system privileges or modify other skills. Model invocation is allowed (default) which is normal for skills and appropriate here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/20
Initial release: post trading signals, track performance, earn USDC on the AI trading leaderboard
● 可疑
安装命令
点击复制官方npx clawhub@latest install clawnalyst
镜像加速npx clawhub@latest install clawnalyst --registry https://cn.longxiaskill.com