扫描报告
0 /100
polymarket-twitter-bin-decay-trader
Trades post-count bin markets by tracking elapsed time to identify mathematically dead bins that still hold residual probability
A legitimate Polymarket trading bot that uses elapsed-time math to trade post-count bin markets, with safe paper-trading defaults and no malicious indicators found.
可以安装
No action needed. The skill is safe to use. Ensure SIMMER_API_KEY is kept private and only enable --live trading in controlled environments.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | trader.py:1-6 — no file open/write calls |
| 网络访问 | READ | READ | ✓ 一致 | trader.py:7 — uses simmer-sdk for API calls to Polymarket (declared in SKILL.md) |
| 命令执行 | NONE | NONE | — | trader.py — no subprocess/os.system calls |
| 环境变量 | READ | READ | ✓ 一致 | trader.py:30-36 — reads SIMMER_* vars (declared in SKILL.md and clawhub.json) |
| 技能调用 | NONE | NONE | — | No skill invocation mechanisms present |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | No browser/web automation |
| 数据库 | NONE | NONE | — | No database connections |
2 项发现
中危 外部 URL 外部 URL
https://simmer.markets/skills SKILL.md:10 提示 邮箱 邮箱地址
[email protected] SKILL.md:124 目录结构
3 文件 · 19.2 KB · 529 行 Python 1f · 320L
Markdown 1f · 126L
JSON 1f · 83L
├─
clawhub.json
JSON
├─
SKILL.md
Markdown
└─
trader.py
Python
依赖分析 1 项
| 包名 | 版本 | 来源 | 已知漏洞 | 备注 |
|---|---|---|---|---|
simmer-sdk | unspecified | pip | 否 | Published on PyPI by Simmer Markets; version not pinned in requirements |
安全亮点
✓ Safe-by-default design: paper trading (venue=sim) is the default; live trading requires explicit --live flag
✓ All required credentials (SIMMER_API_KEY) and dependencies (simmer-sdk) are declared in SKILL.md and clawhub.json
✓ No obfuscation, no base64, no eval(), no dynamic code generation
✓ No network connections to external IPs beyond the documented simmer-sdk API endpoint
✓ No sensitive path access (~/.ssh, ~/.aws, .env, etc.)
✓ No credential exfiltration — API key is used only for Polymarket authentication via the SDK
✓ Uses only Python standard library + one documented third-party SDK from a known publisher
✓ Risk parameters are tunable via env vars and configurable from Simmer UI without code changes
✓ Code is straightforward, readable trading logic with no hidden functionality
✓ Automaton autostart is false, cron is null — skill does not auto-execute on install