Is bubble501/phemex-trade safe?
Yes. bubble501/phemex-trade is safe to install. Oathe's behavioral security audit gave the phemex-trade skill by bubble501 a trust score of 92/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/bubble501/phemex-trade
Is bubble501/phemex-trade safe to install?
This Phemex trading skill appears to be a legitimate cryptocurrency trading interface that provides documentation for using a trading CLI tool. It contains no executable code and includes appropriate safety measures to prevent unauthorized trading.
What security issues were found in bubble501/phemex-trade?
Category Scores
Findings (3)
INFO External npm package dependency -15 ▶
Skill references external npm package 'phemex-trade-mcp' for functionality. The package itself was not audited as part of this skill review.
INFO API credentials required -10 ▶
Skill requires PHEMEX_API_KEY and PHEMEX_API_SECRET environment variables for trading functionality. This is normal for trading applications but users should be cautious with real credentials.
INFO Financial risk from trading operations -15 ▶
Skill enables cryptocurrency trading which carries inherent financial risk. However, it includes appropriate safety measures requiring user confirmation for trades.
Should I install bubble501/phemex-trade?
Oathe's verdict for bubble501/phemex-trade is SAFE with a trust score of 92/100. Recommendation: Install.