可信 — 风险评分 5/100
上次扫描:1 天前 重新扫描
5 /100
polymarket-24h-nba-game-structure-trader
Trades structural inconsistencies across correlated NBA game markets on Polymarket by detecting cross-market mispricings
A legitimate Polymarket NBA game structure arbitrage trading skill with comprehensive documentation, safe-by-default paper trading mode, and no suspicious code patterns.
技能名称polymarket-24h-nba-game-structure-trader
分析耗时28.0s
引擎pi
可以安装
This skill is safe to use. No action required.
资源类型声明权限推断权限状态证据
文件系统 NONE NONE No file read/write operations in trader.py
网络访问 NONE READ ✓ 一致 Uses simmer-sdk SimmerClient for API calls; all network access is through docume…
命令执行 NONE NONE No subprocess, os.system, or shell execution found
环境变量 READ READ ✓ 一致 Only reads SIMMER_API_KEY and tunable risk parameters (lines 44-52); no iteratio…
技能调用 NONE NONE No skill invocation capability used
剪贴板 NONE NONE No clipboard access
浏览器 NONE NONE No browser automation
数据库 NONE NONE No database access

目录结构

3 文件 · 34.1 KB · 857 行
Python 1f · 631L Markdown 1f · 139L JSON 1f · 87L
├─ 📋 clawhub.json JSON 87L · 1.9 KB
├─ 📝 SKILL.md Markdown 139L · 6.4 KB
└─ 🐍 trader.py Python 631L · 25.8 KB

依赖分析 1 项

包名版本来源已知漏洞备注
simmer-sdk * pip Version not pinned; SDK from Simmer Markets (SpartanLabsXyz)

安全亮点

✓ Documentation is comprehensive and accurately describes all behavior
✓ Safe by default: paper trading (venue=sim) without --live flag
✓ Explicit --live flag required for real trades with clear warning in docs
✓ autostart=false and cron=null declared honestly in clawhub.json
✓ Credential scope is minimal: only reads SIMMER_API_KEY
✓ No credential harvesting: does not iterate os.environ for keys
✓ No obfuscation: code is readable, well-commented
✓ No shell execution: no subprocess, os.system, eval, or exec
✓ No sensitive path access: no ~/.ssh, ~/.aws, or .env file reading
✓ No network exfiltration: all API calls go through documented simmer-sdk
✓ Flip-flop and slippage safeguards implemented for trade safety