扫描报告
5 /100
polymarket-youtube-channel-trader
Trades Polymarket YouTube channel prediction markets (subscriber milestones, view-count races) using first-hour velocity models and channel volatility profiles. Paper trading by default.
Legitimate prediction-market trading bot that uses a documented SDK for Polymarket trading with safe paper-trading defaults and no malicious indicators.
可以安装
No action required. The skill is safe to use. Consider pinning simmer-sdk to a specific version for reproducible builds.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file reads or writes beyond own files |
| 网络访问 | READ | READ | ✓ 一致 | SDK makes outbound API calls to simmer.markets — documented and expected |
| 命令执行 | NONE | NONE | — | No subprocess, os.system, or shell execution detected |
| 环境变量 | READ | READ | ✓ 一致 | Only reads SIMMER_* tunables — documented in SKILL.md |
| 技能调用 | NONE | NONE | — | No inter-skill invocation |
| 剪贴板 | NONE | NONE | — | Not accessed |
| 浏览器 | NONE | NONE | — | Not accessed |
| 数据库 | NONE | NONE | — | Not accessed |
1 项发现
中危 外部 URL 外部 URL
https://simmer.markets/skills SKILL.md:9 目录结构
3 文件 · 37.4 KB · 994 行 Python 1f · 701L
Markdown 1f · 214L
JSON 1f · 79L
├─
clawhub.json
JSON
├─
SKILL.md
Markdown
└─
trader.py
Python
依赖分析 1 项
| 包名 | 版本 | 来源 | 已知漏洞 | 备注 |
|---|---|---|---|---|
simmer-sdk | * | pip | 否 | Version not pinned — supply chain hygiene concern |
安全亮点
✓ Safe by default: paper trading mode (venue=sim) unless --live flag is explicitly provided
✓ No shell execution, subprocess, or command injection vectors
✓ No credential exfiltration — SIMMER_API_KEY is used only with the simmer-sdk client
✓ No obfuscation, base64, or eval() usage
✓ No sensitive file/path access (~/.ssh, ~/.aws, .env)
✓ No remote script downloads (curl|bash, wget|sh)
✓ No hidden HTML comments or steganographic payloads
✓ All network I/O is through the documented simmer-sdk, not raw sockets or direct HTTP
✓ No cron/scheduled tasks or persistence mechanisms
✓ Comprehensive documentation in SKILL.md covering all strategy logic and risk parameters
✓ Small, readable codebase (701 lines) with no third-party dependencies beyond the SDK