moltrade Security Audit Report
moltrade is an AI agent skill, created by ai-chen2050 and published at openclaw/skills. ClawSecure audited moltrade across 8 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 85/100 (Safe). The 3 findings concentrate in Policy Violation, Command Injection and Permissions Manifest, including Variable $SIGNATURE (line 13) flows to `curl` at line 16. and Missing config.json - agent may not be properly configured. 1 was rated high or critical severity.
Is moltrade safe?
ClawSecure audited moltrade and assigned a security score of 85/100 (Safe), identifying 3 findings across Policy Violation and Command Injection. Review the findings below before installing.
What did ClawSecure find in moltrade?
ClawSecure identified 3 findings in moltrade, concentrated in Policy Violation, Command Injection and Permissions Manifest. 1 was rated high or critical severity. The most severe include Variable $SIGNATURE (line 13) flows to `curl` at line 16. and Missing config.json - agent may not be properly configured.
How was moltrade audited?
ClawSecure ran moltrade through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 8 files from openclaw/skills.
What does a score of 85 mean?
ClawSecure assigned moltrade a security score of 85/100, placing it in the Safe range. Scores of 80 or above qualify for ClawSecure Verified status, though 1 finding was rated high or critical and warrants review. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for moltrade
ClawSecure detected 3 security findings in moltrade, spanning Policy Violation, Command Injection and Permissions Manifest.
- high · Variable $SIGNATURE (line 13) flows to `curl` at line 16.. Command Injection finding detected in
binance/spot/references/authentication.md:92. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
- info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in
SKILL.md.
Each finding is expandable in the interactive list below.
3-Layer Audit Protocol
Security Recommendations for moltrade
Resolve policy violations
Harden command execution
Add a config.json permissions manifest
Pin dependencies to exact versions
1.2.3 instead of ^1.2.3) to keep unauthorized code out of your dependency tree. ClawSecure checks every dependency against known CVE databases.Related Security Research
OWASP ASI Top 10 Explained: The Complete Guide to AI Agent Security StandardsโUnderstanding Our 3-Layer Audit ProtocolโWhy Generic Scanners Fail at AI Agent SecurityโRelated AI Agent Security Audits
Scanned on March 19, 2026. moltrade is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.