Scan Report
5 /100
polymarket-bundle-btc-5min-streak-trader
BTC 5-minute interval streak mean-reversion trader for Polymarket
A legitimate Polymarket trading bot with clear documentation, proper safety defaults (paper trading), and no malicious behavior detected.
Safe to install
This skill is safe to use. Ensure SIMMER_API_KEY is stored securely and only use --live flag intentionally.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No file operations found |
| Network | READ | READ | ✓ Aligned | Uses simmer-sdk for Polymarket API (declared) |
| Shell | NONE | NONE | — | No subprocess or shell execution |
| Environment | READ | READ | ✓ Aligned | Reads SIMMER_API_KEY and tunables (declared in SKILL.md) |
| Skill Invoke | NONE | NONE | — | Not used |
| Clipboard | NONE | NONE | — | Not used |
| Browser | NONE | NONE | — | Not used |
| Database | NONE | NONE | — | Not used |
File Tree
3 files · 25.4 KB · 632 lines Python 1f · 447L
Markdown 1f · 98L
JSON 1f · 87L
├─
clawhub.json
JSON
├─
SKILL.md
Markdown
└─
trader.py
Python
Dependencies 1 items
| Package | Version | Source | Known Vulns | Notes |
|---|---|---|---|---|
simmer-sdk | * | pip | No | Official SDK from SpartanLabsXyz, version not pinned |
Security Positives
✓ Paper trading (sim mode) is the default, preventing accidental real trades
✓ Explicit --live flag required for live trading with clear warning in documentation
✓ API key access is declared and necessary for trading functionality
✓ No obfuscation or suspicious code patterns
✓ Risk parameters are tunable with sensible defaults
✓ Spread and position limits prevent runaway trades
✓ All dependencies declared (simmer-sdk from PyPI)