Oraclaw Risk

Risk assessment engine for AI agents. Value at Risk (VaR), CVaR, stress testing, and multi-factor risk scoring. Monte Carlo powered. Built for trading agents...

This skill describes a Monte Carlo/Bayesian risk engine but declares an ORACLAW_API_KEY without telling you how it will be used. Before installing or supplying any API key: 1) Ask the publisher to explicitly document runtime behavior — does the agent call https://oraclaw.dev or another endpoint? Provide full API endpoints and examples of requests that use ORACLAW_API_KEY. 2) Verify the pricing/payment mechanism and full payment address; 'x402' is not a complete address. 3) If an external API call is required, request that the skill document what data is sent to the remote service and how results are returned. 4) If you must provide a key, use a scoped, revocable key with minimal permissions and monitor its usage; rotate it after testing. 5) Prefer not to install or provide secrets until the developer supplies clear runtime/endpoint details or ships code showing local-only computation. If the developer updates SKILL.md to either remove the API key requirement (if computation is local) or to clearly document API endpoints and the exact use of ORACLAW_API_KEY, this assessment could be revised to benign.

Type: OpenClaw Skill Name: oraclaw-risk Version: 1.0.0 The skill bundle contains only metadata and documentation for a financial risk assessment tool (OraClaw Risk). It lacks any executable code and the instructions in SKILL.md are strictly focused on quantitative finance logic, such as Value at Risk (VaR) and Monte Carlo simulations, with no evidence of malicious intent or prompt injection.