Send to FMZ

A specialized tool for sending quantitative trading signals to the FMZ platform via HTTP API.

This skill is generally what it says — it posts trade signals to FMZ — but review and tighten a few things before installing: (1) Replace the hardcoded MY_UUID with a secret passed via environment variable or secure input rather than editing the source, so the UUID isn't exposed in code. (2) Confirm the use of node_id=0 (broadcast) is intended — broadcasting will send the signal to all robots and can have unintended effects. (3) Ensure the runtime has the requests package or adapt the code to available HTTP tooling. (4) Add response validation and error handling (check FMZ API response body) before assuming success. (5) Test in a safe/staging robot on FMZ to confirm behavior and rate limits before sending real trades.

Type: OpenClaw Skill Name: send-signal Version: 1.0.0 The skill is designed to send trading signals to the FMZ platform. It is classified as suspicious due to a significant vulnerability: the `handler.py` file contains a hardcoded `MY_UUID` (`530032201`) which is intended for user customization but serves as a default. If FMZ's API relies solely on this UUID for authentication, any user who deploys this skill without changing the default UUID could be vulnerable to unauthorized trading signals being sent to their FMZ robots by anyone else using the same default UUID, potentially leading to financial loss. This represents a weak authentication mechanism and a potential for unauthorized actions on the trading platform, even though there is no evidence of direct malicious intent against the user's local system.