Scan Report
0 /100
kelly-formula-crypto
Kelly Formula position size calculator for crypto trading with x402 payment support
A legitimate Kelly Formula crypto trading calculator with transparent x402 payment integration, no hidden functionality, and no security concerns.
Safe to install
This skill is safe to use. The x402 payment mechanism and API endpoint are properly documented.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No filesystem operations in kelly_calculator.py |
| Network | READ | READ | ✓ Aligned | x402 payment endpoint declared in SKILL.md line 15 |
| Shell | NONE | NONE | — | No subprocess or shell execution |
| Environment | NONE | NONE | — | No os.environ access |
| Skill Invoke | NONE | NONE | — | No skill invocation |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser automation |
| Database | NONE | NONE | — | No database operations |
7 findings
Medium External URL 外部 URL
https://img.shields.io/badge/License-MIT-yellow.svg README.md:10 Medium External URL 外部 URL
https://img.shields.io/badge/Python-3.8+-blue.svg README.md:11 Medium External URL 外部 URL
https://www.python.org/ README.md:11 Medium External URL 外部 URL
https://api.x402.dev/pay README.md:36 Medium Wallet Address 加密货币钱包地址
0x24b288c98421d7b447c2d6a6442538d01c5fce22 README.md:39 Medium External URL 外部 URL
https://x.com/KKaWSB/status/1968453490084299020 README.md:195 Medium External URL 外部 URL
https://kelly-formula-crypto.vercel.app/api/calculate SKILL.md:15 File Tree
4 files · 15.6 KB · 636 lines Markdown 2f · 403L
Python 1f · 232L
Text 1f · 1L
├─
▾
scripts
│ └─
kelly_calculator.py
Python
├─
README.md
Markdown
├─
requirements.txt
Text
└─
SKILL.md
Markdown
Dependencies 1 items
| Package | Version | Source | Known Vulns | Notes |
|---|---|---|---|---|
Standard library only | N/A | built-in | No | Uses only argparse, json, and typing modules |
Security Positives
✓ Clean, straightforward Python implementation with no obfuscation
✓ All network operations declared in SKILL.md (x402 payment endpoint)
✓ Payment wallet address clearly documented for transparency
✓ No subprocess, shell execution, or system command calls
✓ No credential harvesting or environment variable access
✓ No data exfiltration or C2 communication
✓ No base64 encoding or code obfuscation
✓ No sensitive file/path access
✓ Dependencies are standard library only (argparse, json, typing)
✓ Source code matches documented functionality exactly