trader

Trade Solana tokens, track portfolio, bet on prediction markets, check NFT floors via the trader CLI.

This skill appears to be what it claims (a Solana trading CLI) but exercise caution before installing. Steps to consider: - Verify the npm package and author: check the @zeroexcore/trader package page on npm and the linked GitHub repo, confirm the package maintainer and recent activity, and inspect the package contents if possible. - Avoid storing your WALLET_PASSWORD in plaintext config files. Prefer exporting the password as an environment variable at runtime rather than writing it into ~/.openclaw/openclaw.json unless you confirm that file is encrypted and access-limited. - Understand that global npm installs can execute arbitrary code during installation; if you cannot vet the package, run the CLI via npx in an isolated environment or inspect the package tarball first. - Back up private keys offline after export, and treat any 'trader wallet export' output as extremely sensitive. - If you need higher assurance, ask the publisher for a reproducible source link, package checksum, or a signed release; do not proceed if you cannot verify the package origin and integrity.

Type: OpenClaw Skill Name: zeroexcore-trader Version: 1.0.1 The skill bundle provides a Solana trading CLI with features for token swaps, prediction markets, and portfolio tracking. It includes explicit security instructions for the AI agent to prevent the disclosure of sensitive credentials and implements local encrypted storage (AES-256-GCM) with restricted file permissions (0600) for wallet data. The external dependencies (Helius and Jupiter APIs) are standard for the Solana ecosystem, and the documentation in SKILL.md focuses on safety rules and legitimate trading functionality without any signs of malicious intent or data exfiltration.