ClawHub
Back to plugin

Security audit

HeyTraders Quant Trading Skills

Security checks for vulnerabilities and agentic risk

Overview

The plugin is a disclosed HeyTraders browser-control integration with financial-trading implications, but its sensitive behavior is purpose-aligned and bounded by explicit user authorization instructions.

Install only if you want an Agent-owned HeyTraders browser session that can manage the HeyTraders app. Use a dedicated browser profile, keep exchange credentials and wallet approvals outside chat/tool arguments, and require explicit confirmation before funding, connecting exchanges, placing orders, starting strategies, or sharing backtest reports.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
85% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · skills/heytraders/SKILL.md (reported line 73)May include surrounding context.

md
- The plugin stores only its Ed25519 HeyTraders login identity in the OpenClaw state directory. That identity authenticates the Agent account; it is not an exchange wallet or trading credential.
- Agent login does not require Google login, a Link Agent code, Codex OAuth, or a human browser handoff. The selected AI provider is independent of the HeyTraders Agent identity.
- Do not call a HeyTraders HTTP API, shell command, page script, documented or undocumented bridge member, or fallback transport to bypass `heytraders_cli`. The plugin owns its fixed browser transport.
- Do not bypass confirmations, authorization, subscription limits, exchange permissions, or application policy. A discoverable command is not permission to perform an unrequested financial action.
- Treat orders, strategy starts, wallet approvals, credential creation, deposits, and other irreversible actions as separate operations with their own explicit authority.

## Browser transport recovery

Static analysis

No suspicious patterns detected.