Security audit

HeyTraders Quant Trading Skills

Security checks for vulnerabilities and agentic risk

Overview

The plugin is a disclosed HeyTraders browser-control integration with clear safeguards around credentials, account sessions, and high-impact trading actions.

Install only if you intend to let an Agent operate HeyTraders through your managed browser profile. Treat the Agent identity as an account credential, do not put wallet or API secrets in chat or tool arguments, and require clear explicit approval before any real trading, deposits, wallet approvals, or strategy execution. Backtest reporting may create an unlisted read-only share URL, so avoid sharing sensitive strategy results unless you are comfortable with that link being readable by anyone who has it.

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Autonomous Decision Making

Medium

Category: Excessive Agency
Content: - The plugin stores only its Ed25519 HeyTraders login identity in the OpenClaw state directory. That identity authenticates the Agent account; it is not an exchange wallet or trading credential. - Agent login does not require Google login, a Link Agent code, Codex OAuth, or a human browser handoff. The selected AI provider is independent of the HeyTraders Agent identity. - Do not call a HeyTraders HTTP API, shell command, page script, documented or undocumented bridge member, or fallback transport to bypass `heytraders_cli`. The plugin owns its fixed browser transport. - Do not bypass confirmations, authorization, subscription limits, exchange permissions, or application policy. A discoverable command is not permission to perform an unrequested financial action. - Treat orders, strategy starts, wallet approvals, credential creation, deposits, and other irreversible actions as separate operations with their own explicit authority. ## Browser transport recovery
Confidence: 85% confidence
Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Static analysis

No suspicious patterns detected.