trade-agent

Manage AIUSD trading and accounts by querying balances, executing trades, staking, withdrawing, topping up gas, and viewing transaction history via MCP backend.

This package contains contradictory signals: the registry entry claims no requirements and no description, but the files implement an AIUSD trading skill that expects a bearer token and contains self-extracting installers that will write files and run 'npm install'. Do not run the installers or provide secrets until you validate the source. Steps to consider before installing: - Ask the publisher for an authoritative description and why registry metadata lists none of the env/binary requirements shown in SKILL.md. - Verify the owner and the GitHub release links in README independently (open them in a browser you control). The README points to github.com/galpha-ai — confirm that repository and release match the package checksum. - Inspect the extracted package content in a sandbox or on an isolated machine before running any installer or 'npm install'. Decode the base64 archive yourself to review files and package.json dependencies. - Do not set or expose MCP_HUB_TOKEN or other secrets to this skill until you confirm its legitimacy. If you must test, run it in a disposable VM/container with no access to real secrets or wallets. - If you plan to trust this skill, ask for a signed release or audit from the maintainer and prefer a version with explicit declared requirements and no hidden base64 payloads. Given the metadata/instruction mismatches and embedded archive, proceed cautiously — the inconsistencies could be benign (sloppy packaging) or intentional; additional verification from the author would materially increase confidence.

Type: OpenClaw Skill Name: trade-agent Version: 1.0.1 The skill is classified as suspicious due to several high-risk capabilities, although without clear evidence of intentional malicious behavior. The `SKILL.md` instructs the AI agent to access sensitive local files (`~/.mcp-hub/token.json`, `~/.mcporter/`) and environment variables (`MCP_HUB_TOKEN`) for authentication, and to execute local shell commands (`npm run reauth`, `aiusd-skill tools --detailed`). Additionally, both `aiusd-skill-installer.sh` and `aiusd-skill-installer.js` installers perform `rm -rf` (or equivalent) and execute `npm install`, which involves fetching and executing arbitrary remote code (dependencies), posing a supply chain risk. While these actions are presented as necessary for the skill's stated purpose of trading and account management, they grant significant system access.