Scan Report
5 /100
polymarket-48h-weather-distribution-trader
Trades mispricings in weather temperature-bin markets on Polymarket by reconstructing implied probability distributions and detecting sum violations and monotonicity breaks.
A clean, transparent Polymarket weather distribution arbitrage trading bot with no malicious behavior, well-documented behavior, and credential usage limited to its stated trading purpose.
Safe to install
This skill is safe to use. Ensure SIMMER_API_KEY is stored securely and not committed to version control.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No file read/write operations found |
| Network | NONE | READ | ✓ Aligned | SDK network calls to Polymarket API, documented in SKILL.md |
| Shell | NONE | NONE | — | No subprocess or shell execution |
| Environment | READ | READ | ✓ Aligned | Reads SIMMER_API_KEY and tunable risk params; declared in SKILL.md |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser access |
| Database | NONE | NONE | — | No database access |
File Tree
3 files · 27.8 KB · 729 lines Python 1f · 522L
Markdown 1f · 120L
JSON 1f · 87L
├─
clawhub.json
JSON
├─
SKILL.md
Markdown
└─
trader.py
Python
Dependencies 1 items
| Package | Version | Source | Known Vulns | Notes |
|---|---|---|---|---|
simmer-sdk | unpinned | pip | No | SDK dependency from PyPI; version not specified in files but installed via pip |
Security Positives
✓ No shell execution (subprocess, os.system, curl|bash, etc.)
✓ No credential harvesting — SIMMER_API_KEY is used only for SDK authentication
✓ No obfuscation — no base64, eval(), or anti-analysis patterns
✓ No data exfiltration — all data stays within the trading workflow
✓ No sensitive file access (~/.ssh, ~/.aws, .env beyond what's declared)
✓ No remote code execution vectors
✓ Paper trading by default — live trades require explicit --live flag
✓ Documentation is comprehensive and accurately describes all behavior
✓ Single external dependency (simmer-sdk) from PyPI, clearly declared
✓ Code is readable and straightforward trading logic without surprises