扫描报告
0 /100
kalshi-crypto-volatility-skew-trader
Bitcoin price bin trading strategy using volatility skew detection on Kalshi markets
Legitimate crypto trading skill that compares BTC market-implied volatility to historical vol to identify mispriced Kalshi bin markets. All functionality is documented, defaults to safe dry-run mode, and uses only the declared simmer-sdk dependency.
可以安装
Safe to use. Ensure SIMMER_API_KEY is kept confidential. Review simmer-sdk source code before providing live trading credentials.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | trader.py:36 - load_config() reads config files |
| 文件系统 | WRITE | WRITE | ✓ 一致 | trader.py:36 - update_config() writes config files |
| 网络访问 | READ | READ | ✓ 一致 | trader.py:217 - _request() to /api/sdk/markets |
| 环境变量 | READ | READ | ✓ 一致 | trader.py:69 - os.environ.get() for API keys |
| 命令执行 | NONE | NONE | — | No subprocess usage found |
2 项发现
中危 外部 URL 外部 URL
https://simmer.markets/skills SKILL.md:10 提示 邮箱 邮箱地址
[email protected] SKILL.md:117 目录结构
3 文件 · 32.5 KB · 913 行 Python 1f · 709L
Markdown 1f · 119L
JSON 1f · 85L
├─
clawhub.json
JSON
├─
SKILL.md
Markdown
└─
trader.py
Python
依赖分析 1 项
| 包名 | 版本 | 来源 | 已知漏洞 | 备注 |
|---|---|---|---|---|
simmer-sdk | * | PyPI | 否 | Published by Simmer Markets, github: SpartanLabsXyz/simmer-sdk |
安全亮点
✓ Default mode is dry-run - no real trades execute without --live flag
✓ Cron automation is explicitly disabled (autostart: false, cron: null)
✓ Only one external dependency: simmer-sdk from PyPI (verifiable source)
✓ All sensitive operations require explicit --live flag
✓ Config system allows safe parameter adjustment without code changes
✓ Trade journal integration is optional and fails gracefully
✓ Clear safeguards: slippage checks, liquidity checks, time-to-resolution checks
✓ No credential exfiltration - API keys only used for authentication
✓ Reputation tagging (TRADE_SOURCE, SKILL_SLUG) provides audit trail