中文 EN
Start Review
Skill Trust Decision

agent-guard

Polymarket 交易止损工具，核心代码在外部 npm 包中无法审查，处理私钥存在供应链风险

Install decision first Source: ClawHub Scanned: 1 day ago
Files 8
Artifacts 2
Violations 0
Findings 3
Most direct threat evidence
High Supply Chain
外部 npm 包依赖无法审查

核心功能实现在 @hypelens/[email protected] 包中，代码不在本地仓库，无法验证安全性

scripts/package.json:7

Why this conclusion was reached

1/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Review
Hidden execution and egress

2 lower-risk artifacts were extracted and still need context.

Block
Attack chain and severe findings

The report includes 0 attack-chain steps and 1 severe findings.

Pass
Dependencies and supply chain hygiene

Dependencies are present but no obvious high-risk issue stands out.

What drove the risk score up

供应链依赖 +20

核心逻辑在外部 npm 包中，版本固定但无法审查代码

私钥处理 +10

需要 EXIT_PK 私钥进行保护性卖出，写入配置文件

外部 API 调用 +5

调用 Polymarket Data API 和 clearinghouse

本地脚本无恶意 +-5

脚本仅是模块加载器，无可疑行为

Most important evidence

High Supply Chain

外部 npm 包依赖无法审查

核心功能实现在 @hypelens/[email protected] 包中，代码不在本地仓库，无法验证安全性

scripts/package.json:7
在使用前审查 npm 包的源码：npm view @hypelens/[email protected] repository
Medium Credential Theft

私钥通过环境变量和配置文件处理

EXIT_PK 和 AGENT_GUARD_EXIT_PK 私钥需要配置，exits.dryRun 状态写入配置文件，存在私钥泄露风险

NAUTILUS-SIDECAR.md:14
确保环境变量和配置文件的安全，使用专用止损钱包而非主钱包
Low Sensitive Access

涉及钱包地址操作

工具操作加密货币钱包地址进行保护性卖出，包括写入钱包策略配置

SKILL.md:95
遵循文档指引，不要与指定地址交易

Declared capability vs actual capability

Filesystem Pass
Declared WRITE
→
Inferred WRITE
NAUTILUS-SIDECAR.md:52 state/heartbeat.json
Network Pass
Declared READ
→
Inferred READ
SKILL.md:18 Data API + clearinghouse
Shell Pass
Declared WRITE
→
Inferred WRITE
BOT.md:3 npm scripts

Suspicious artifacts and egress

Medium External URL
https://nautilustrader.io/docs/latest/integrations/polymarket/

NAUTILUS-SIDECAR.md:36

Medium Wallet Address
0x9548B8E9554a1968843B3C380431b10996247c88

SKILL.md:95

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
@hypelens/hypelens-agent-guard 0.1.18 npm No 核心依赖包，代码不可审查

File composition

8 files · 302 lines
Markdown 4 files · 207 linesJavaScript 3 files · 86 linesJSON 1 files · 9 lines
Files of concern · 3
SKILL.md Markdown · 110 lines
涉及钱包地址操作 · 0x9548B8E9554a1968843B3C380431b10996247c88
NAUTILUS-SIDECAR.md Markdown · 70 lines
私钥通过环境变量和配置文件处理 · https://nautilustrader.io/docs/latest/integrations/polymarket/
scripts/package.json JSON · 9 lines
外部 npm 包依赖无法审查
Other files · BOT.md · start-mcp.mjs · start-watcher.mjs · setup.mjs · ELIZA-COMPANION.md

Security positives

本地脚本代码简洁清晰，无混淆或隐藏逻辑
文档完整描述了功能范围和风险
本地脚本只是模块加载器，无恶意行为
版本固定为 0.1.18，可追溯
未发现凭证收割或数据外泄代码