Skip to main content

atlas-argos

ATLAS is an autonomous manager for the ARGOS ecosystem, handling technical operations and user management for a crypto trading bot.

Install this skill

or
69/100

Security score

The atlas-argos skill was audited on Mar 3, 2026 and we found 11 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 402

Template literal with variable interpolation in command context

SourceSKILL.md
402```bash
medium line 545

Template literal with variable interpolation in command context

SourceSKILL.md
545```bash
medium line 170

Curl to non-GitHub URL

SourceSKILL.md
170curl -s "https://api.telegram.org/bot$BOT_TOKEN/sendMessage" \
medium line 413

Curl to non-GitHub URL

SourceSKILL.md
413curl -s "https://api.telegram.org/bot${BOT_TOKEN}/sendMessage" \
medium line 144

Webhook reference - potential data exfiltration

SourceSKILL.md
1443. Webhook confirma pagamento
low line 406

Access to .env file

SourceSKILL.md
406source $(find /home -maxdepth 4 -name ".env" -path "*argos*" -printf '%h\n' 2>/dev/null | head -1)/.env 2>/dev/null
low line 408

Access to .env file

SourceSKILL.md
408# Fallback: ler do .env directamente
low line 409

Access to .env file

SourceSKILL.md
409BOT_TOKEN="${TELEGRAM_BOT_TOKEN:-$(grep BOT_TOKEN $(find /home -name '.env' -path '*argos*' 2>/dev/null | head -1) 2>/dev/null | cut -d= -f2)}"
low line 410

Access to .env file

SourceSKILL.md
410ADMIN_ID="${TELEGRAM_ADMIN_ID:-$(grep ADMIN_ID $(find /home -name '.env' -path '*argos*' 2>/dev/null | head -1) 2>/dev/null | cut -d= -f2)}"
low line 170

External URL reference

SourceSKILL.md
170curl -s "https://api.telegram.org/bot$BOT_TOKEN/sendMessage" \
low line 413

External URL reference

SourceSKILL.md
413curl -s "https://api.telegram.org/bot${BOT_TOKEN}/sendMessage" \
Scanned on Mar 3, 2026
View Security Dashboard