kryptogo-meme-trader
Enables analysis and trading of meme coins using KryptoGO's platform, featuring wallet clustering and automated trade execution.
Install this skill
Security score
The kryptogo-meme-trader skill was audited on May 31, 2026 and we found 43 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 40 | 2. Add to `~/.openclaw/workspace/.env`: |
Access to hidden dotfiles in home directory
| 42 | echo 'KRYPTOGO_API_KEY=sk_live_YOUR_KEY' >> ~/.openclaw/workspace/.env && chmod 600 ~/.openclaw/workspace/.env |
Access to hidden dotfiles in home directory
| 64 | - Runtime scripts do NOT read `.env` directly — all credentials are accessed via environment variables only, which must be pre-loaded by the caller (`source ~/.openclaw/workspace/.env`) |
Access to hidden dotfiles in home directory
| 89 | source ~/.openclaw/workspace/.env |
Access to hidden dotfiles in home directory
| 141 | Runtime scripts in this skill do NOT read `.env` files directly. All credentials are accessed via environment variables only, which must be pre-loaded by the caller (`source ~/.openclaw/workspace/.env |
Access to hidden dotfiles in home directory
| 153 | source ~/.openclaw/workspace/.env && bash scripts/cron-examples.sh setup-default |
Access to hidden dotfiles in home directory
| 156 | source ~/.openclaw/workspace/.env && bash scripts/cron-examples.sh setup-autonomous |
Access to hidden dotfiles in home directory
| 216 | source ~/.openclaw/workspace/.env && python3 scripts/swap.py <token_mint> 0.1 |
Access to hidden dotfiles in home directory
| 217 | source ~/.openclaw/workspace/.env && python3 scripts/swap.py <token_mint> <amount> --sell |
Access to hidden dotfiles in home directory
| 268 | All scripts require credentials to be pre-loaded: `source ~/.openclaw/workspace/.env` before running. |
Access to hidden dotfiles in home directory
| 271 | source ~/.openclaw/workspace/.env && bash scripts/portfolio.sh # Portfolio check |
Access to hidden dotfiles in home directory
| 272 | source ~/.openclaw/workspace/.env && bash scripts/trending.sh # Trending tokens |
Access to hidden dotfiles in home directory
| 273 | source ~/.openclaw/workspace/.env && bash scripts/analysis.sh # Full analysis dashboard |
Access to hidden dotfiles in home directory
| 274 | source ~/.openclaw/workspace/.env && python3 scripts/swap.py <mint> 0.1 # Buy |
Access to hidden dotfiles in home directory
| 275 | source ~/.openclaw/workspace/.env && python3 scripts/swap.py <mint> <amt> --sell # Sell |
Access to hidden dotfiles in home directory
| 276 | source ~/.openclaw/workspace/.env && bash scripts/test-api.sh # API connectivity test |
Access to .env file
| 40 | 2. Add to `~/.openclaw/workspace/.env`: |
Access to .env file
| 42 | echo 'KRYPTOGO_API_KEY=sk_live_YOUR_KEY' >> ~/.openclaw/workspace/.env && chmod 600 ~/.openclaw/workspace/.env |
Access to .env file
| 45 | > **Do NOT paste your API key directly in chat.** Always set secrets via `.env` file. |
Access to .env file
| 53 | Creates a Solana keypair, saves to `.env` with chmod 600, prints public address to fund. |
Access to .env file
| 62 | - **NEVER** accept secrets pasted directly in chat — instruct users to set them in `.env` |
Access to .env file
| 63 | - **NEVER** use the Read tool on `.env` — load credentials via `source` command only |
Access to .env file
| 64 | - Runtime scripts do NOT read `.env` directly — all credentials are accessed via environment variables only, which must be pre-loaded by the caller (`source ~/.openclaw/workspace/.env`) |
Access to .env file
| 65 | - **Exception:** `scripts/setup.py` reads and writes `.env` for initial keypair generation and address repair — this is the only script that touches credential files |
Access to .env file
| 89 | source ~/.openclaw/workspace/.env |
Access to .env file
| 92 | This is REQUIRED — scripts do not read `.env` directly. All credentials are accessed via environment variables only. |
Access to .env file
| 141 | Runtime scripts in this skill do NOT read `.env` files directly. All credentials are accessed via environment variables only, which must be pre-loaded by the caller (`source ~/.openclaw/workspace/.env |
Access to .env file
| 143 | **Exception:** `scripts/setup.py` reads and writes `.env` — it loads existing keys to avoid regeneration, backs up `.env` before changes, and writes new keypair entries. This is the only script that t |
Access to .env file
| 153 | source ~/.openclaw/workspace/.env && bash scripts/cron-examples.sh setup-default |
Access to .env file
| 156 | source ~/.openclaw/workspace/.env && bash scripts/cron-examples.sh setup-autonomous |
Access to .env file
| 216 | source ~/.openclaw/workspace/.env && python3 scripts/swap.py <token_mint> 0.1 |
Access to .env file
| 217 | source ~/.openclaw/workspace/.env && python3 scripts/swap.py <token_mint> <amount> --sell |
Access to .env file
| 268 | All scripts require credentials to be pre-loaded: `source ~/.openclaw/workspace/.env` before running. |
Access to .env file
| 271 | source ~/.openclaw/workspace/.env && bash scripts/portfolio.sh # Portfolio check |
Access to .env file
| 272 | source ~/.openclaw/workspace/.env && bash scripts/trending.sh # Trending tokens |
Access to .env file
| 273 | source ~/.openclaw/workspace/.env && bash scripts/analysis.sh # Full analysis dashboard |
Access to .env file
| 274 | source ~/.openclaw/workspace/.env && python3 scripts/swap.py <mint> 0.1 # Buy |
Access to .env file
| 275 | source ~/.openclaw/workspace/.env && python3 scripts/swap.py <mint> <amt> --sell # Sell |
Access to .env file
| 276 | source ~/.openclaw/workspace/.env && bash scripts/test-api.sh # API connectivity test |
Access to .env file
| 324 | ├── .env.example |
External URL reference
| 4 | homepage: https://www.kryptogo.xyz |
External URL reference
| 39 | 1. Go to [kryptogo.xyz/account](https://www.kryptogo.xyz/account) and create an API key |
External URL reference
| 184 | > **Free tier limitation:** Cluster analysis only returns the top 2 clusters. To see full cluster data, upgrade at [kryptogo.xyz/pricing](https://www.kryptogo.xyz/pricing). |