扫描报告
0 /100
polymarket-crypto-onchain-trader
Trades Polymarket prediction markets on Bitcoin, Ethereum, Solana price milestones, ETF inflows, halving events, and DeFi protocol milestones using three stacked structural edges.
A legitimate Polymarket paper-trading skill built on the official simmer-sdk, with no shell access, no credential exfiltration, and all capabilities fully declared in documentation.
可以安装
No action needed. The skill is safe to use.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file reads or writes in trader.py |
| 网络访问 | READ | READ | ✓ 一致 | All network I/O via simmer-sdk SimmerClient (PyPI), documented in SKILL.md |
| 命令执行 | NONE | NONE | — | No subprocess, os.system, or shell command execution in trader.py |
| 环境变量 | READ | READ | ✓ 一致 | os.environ used only for SIMMER_API_KEY and SIMMER_* tunables — no iteration ove… |
| 技能调用 | NONE | NONE | — | No cross-skill invocation detected |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | No browser automation |
| 数据库 | NONE | NONE | — | No database access |
目录结构
3 文件 · 25.0 KB · 560 行 Python 1f · 362L
Markdown 1f · 130L
JSON 1f · 68L
├─
clawhub.json
JSON
├─
SKILL.md
Markdown
└─
trader.py
Python
依赖分析 1 项
| 包名 | 版本 | 来源 | 已知漏洞 | 备注 |
|---|---|---|---|---|
simmer-sdk | * | pip | 否 | Official PyPI package from SpartanLabsXyz, declared in clawhub.json |
安全亮点
✓ Safe by default: paper trading (venue='sim') with no --live flag, zero financial risk
✓ autostart=false and cron=null — no automated execution without explicit user configuration
✓ No shell execution: pure Python logic with no subprocess, os.system, or popen calls
✓ No sensitive path access: no reads of ~/.ssh, ~/.aws, .env, or similar credential paths
✓ No credential exfiltration: SIMMER_API_KEY used only to authenticate the simmer-sdk client, never exfiltrated
✓ No obfuscation: all code is plain Python, no base64, eval, or dynamic code generation
✓ No external I/O beyond the simmer-sdk: strategy logic is entirely local
✓ SKILL.md accurately documents all behavior, tunables, and the SIMMER_API_KEY requirement
✓ External dependency (simmer-sdk) pinned to known PyPI package with clear provenance