扫描报告
5 /100
polymarket-candle-timeframe-mismatch-trader
Multi-timeframe analysis for crypto Up or Down markets on Polymarket. Detects when 5-minute candle consensus diverges from the hourly market and trades convergence.
A legitimate Polymarket multi-timeframe trading strategy using a documented SDK with safe paper-trading defaults and no malicious behavior detected.
可以安装
This skill is safe to use. No action needed beyond normal credential hygiene for SIMMER_API_KEY.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | trader.py:1-453 |
| 网络访问 | NONE | READ | ✓ 一致 | trader.py:49-53 -- calls SimmerClient which makes API calls; no direct HTTP |
| 命令执行 | NONE | NONE | — | trader.py -- no subprocess/os.system/shell invocation |
| 环境变量 | READ | READ | ✓ 一致 | trader.py:44-52 -- reads SIMMER_API_KEY and tuning vars |
| 技能调用 | NONE | NONE | — | N/A |
| 剪贴板 | NONE | NONE | — | N/A |
| 浏览器 | NONE | NONE | — | N/A |
| 数据库 | NONE | NONE | — | N/A |
目录结构
3 文件 · 24.3 KB · 637 行 Python 1f · 453L
Markdown 1f · 97L
JSON 1f · 87L
├─
clawhub.json
JSON
├─
SKILL.md
Markdown
└─
trader.py
Python
依赖分析 1 项
| 包名 | 版本 | 来源 | 已知漏洞 | 备注 |
|---|---|---|---|---|
simmer-sdk | * | pip | 否 | Version not pinned in code; pulls from PyPI |
安全亮点
✓ SKILL.md provides comprehensive documentation: strategy logic, credential requirements, safe defaults, and risk parameters
✓ Paper trading (venue='sim') is the hardcoded default; explicit --live flag required for real Polymarket trades
✓ No subprocess, os.system, shell commands, or any form of arbitrary code execution
✓ No direct network HTTP requests; all API traffic goes through the documented simmer-sdk library
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env, etc.) or credential harvesting beyond the declared SIMMER_API_KEY
✓ No obfuscation (no base64, no eval, no encoded strings)
✓ No hidden functionality; code matches stated behavior exactly
✓ Autostart disabled, cron null -- nothing runs automatically
✓ Dependency is a well-known published PyPI package (simmer-sdk) with version pinning available
✓ All risk parameters are declared as tunables in clawhub.json with appropriate ranges