This report was generated in Chinese. Some content may be in Chinese.
Trusted — Risk Score 5/100
Last scan:4 hr ago Rescan
5 /100
kalshi-paper-trading
Kalshi-native paper trading ledger and CLI for binary prediction contracts
Kalshi 纸面交易工具,代码行为与文档声明高度一致,仅本地 SQLite 存储和网络读取 Kalshi 市场数据,无恶意行为。
Skill Namekalshi-paper-trading
Duration31.4s
Enginepi
ClawHub Kalshi Paper Trading v1.0.0 by brs999
📥 208 ⭐ 1
ClawHub Verdict Suspicious dangerous_exec
Safe to install
可安全使用。
ResourceDeclaredInferredStatusEvidence
Filesystem WRITE WRITE ✓ Aligned SKILL.md:1 - 声明用于纸面交易分类账和CLI
Network READ READ ✓ Aligned scripts/kalshi_paper.ts:221 - fetchJson() 读取市场数据
Database WRITE WRITE ✓ Aligned scripts/kalshi_paper.ts:262 - openDb() 创建 SQLite 数据库
Shell WRITE WRITE ✓ Aligned SKILL.md - 通过 node 命令执行 CLI,符合文档示例
Environment READ READ ✓ Aligned scripts/kalshi_paper.ts:204 - 仅读取 KALSHI_BASE_URL
2 findings
🔗
Medium External URL 外部 URL
https://docs.kalshi.com
SKILL.md:4
🔗
Medium External URL 外部 URL
https://api.elections.kalshi.com/trade-api/v2
scripts/kalshi_paper.ts:221

File Tree

4 files · 61.7 KB · 2146 lines
TypeScript 1f · 1274L Markdown 2f · 481L JavaScript 1f · 391L
├─ 📁 references
│ └─ 📝 kalshi-paper-ledger.md Markdown 370L · 7.9 KB
├─ 📁 scripts
│ └─ 📜 kalshi_paper.ts TypeScript 1274L · 38.5 KB
├─ 📁 tests
│ └─ 📜 kalshi_paper.test.mjs JavaScript 391L · 12.1 KB
└─ 📝 SKILL.md Markdown 111L · 3.1 KB

Security Positives

✓ 仅使用 Node.js 内置模块,无第三方依赖
✓ 代码结构清晰,1274 行 TypeScript 无混淆
✓ 文档与代码行为高度一致,无阴影功能
✓ SQLite 数据库仅存储本地,无数据外传
✓ 网络请求仅用于读取 Kalshi 市场数据,范围受限
✓ 测试文件使用 node:test 内置框架,无外部依赖
✓ 支持环境变量配置 API 端点(KALSHI_BASE_URL),非硬编码