扫描报告
5 /100
polymarket-24h-weather-distribution-trader
Trades mispricings in weather temperature-bin markets by detecting sum violations and monotonicity breaks in probability distributions
A legitimate Polymarket trading bot that detects probability distribution violations in weather temperature markets. Clean implementation with no malicious behavior detected.
可以安装
This skill is safe to use. Ensure SIMMER_API_KEY is stored securely and review position limits before enabling live trading.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file read/write operations in trader.py |
| 网络访问 | READ | READ | ✓ 一致 | Uses simmer-sdk for Polymarket API calls only |
| 命令执行 | NONE | NONE | — | No subprocess, os.system, or shell commands found |
| 环境变量 | READ | READ | ✓ 一致 | trader.py:85-93 only reads SIMMER_* env vars |
| 技能调用 | NONE | NONE | — | No skill invocation logic present |
| 剪贴板 | NONE | NONE | — | No clipboard access in code |
| 浏览器 | NONE | NONE | — | No browser automation |
| 数据库 | NONE | NONE | — | No database operations |
目录结构
3 文件 · 28.5 KB · 729 行 Python 1f · 522L
Markdown 1f · 120L
JSON 1f · 87L
├─
clawhub.json
JSON
├─
SKILL.md
Markdown
└─
trader.py
Python
依赖分析 1 项
| 包名 | 版本 | 来源 | 已知漏洞 | 备注 |
|---|---|---|---|---|
simmer-sdk | * | pip | 否 | Official Simmer Markets SDK; version not pinned |
安全亮点
✓ Safe defaults: paper trading mode enabled by default (venue='sim')
✓ Explicit --live flag required for real trades with real USDC
✓ Single dependency on official simmer-sdk from PyPI
✓ No subprocess, shell commands, or raw network calls
✓ No credential harvesting beyond required SIMMER_API_KEY
✓ No sensitive path access (~/.ssh, ~/.aws, .env files)
✓ No obfuscation, base64 payloads, or encoded commands
✓ No persistence mechanisms (cron, startup hooks, backdoors)
✓ Clean, readable code with clear documentation
✓ All behavior declared in SKILL.md matches implementation