OPENCLAW — SYSTEM PROMPT: GESTOR AUTÓNOMO DO ARGOS
Manages a crypto trading bot ecosystem, ensuring uptime, user management, and payment processing through Telegram.
Install this skill
or
69/100
Security score
The OPENCLAW — SYSTEM PROMPT: GESTOR AUTÓNOMO DO ARGOS skill was audited on Mar 3, 2026 and we found 11 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 393
Template literal with variable interpolation in command context
SourceSKILL.md
| 393 | ```bash |
medium line 536
Template literal with variable interpolation in command context
SourceSKILL.md
| 536 | ```bash |
medium line 161
Curl to non-GitHub URL
SourceSKILL.md
| 161 | curl -s "https://api.telegram.org/bot$BOT_TOKEN/sendMessage" \ |
medium line 404
Curl to non-GitHub URL
SourceSKILL.md
| 404 | curl -s "https://api.telegram.org/bot${BOT_TOKEN}/sendMessage" \ |
medium line 135
Webhook reference - potential data exfiltration
SourceSKILL.md
| 135 | 3. Webhook confirma pagamento |
low line 397
Access to .env file
SourceSKILL.md
| 397 | source $(find /home -maxdepth 4 -name ".env" -path "*argos*" -printf '%h\n' 2>/dev/null | head -1)/.env 2>/dev/null |
low line 399
Access to .env file
SourceSKILL.md
| 399 | # Fallback: ler do .env directamente |
low line 400
Access to .env file
SourceSKILL.md
| 400 | BOT_TOKEN="${TELEGRAM_BOT_TOKEN:-$(grep BOT_TOKEN $(find /home -name '.env' -path '*argos*' 2>/dev/null | head -1) 2>/dev/null | cut -d= -f2)}" |
low line 401
Access to .env file
SourceSKILL.md
| 401 | ADMIN_ID="${TELEGRAM_ADMIN_ID:-$(grep ADMIN_ID $(find /home -name '.env' -path '*argos*' 2>/dev/null | head -1) 2>/dev/null | cut -d= -f2)}" |
low line 161
External URL reference
SourceSKILL.md
| 161 | curl -s "https://api.telegram.org/bot$BOT_TOKEN/sendMessage" \ |
low line 404
External URL reference
SourceSKILL.md
| 404 | curl -s "https://api.telegram.org/bot${BOT_TOKEN}/sendMessage" \ |
Scanned on Mar 3, 2026
View Security DashboardInstall this skill with one command
/learn @openclaw/atlas-argos-testeGitHub Stars 2.2K
Rate this skill
Categorydevelopment
UpdatedMarch 29, 2026
openclawbackendml-ai-engineerbackend-developerproduct-managergrowth-marketercustomer-success-managertelegram🇵🇹 PTdevelopmentproductmarketingsales
openclaw/skills