ClawHub

Prediction Trade Journal

v1.1.13

Auto-log trades with context, track outcomes, generate calibration reports to improve trading.

⭐ 0· 1.4k·11 current·11 all-time
byAD88@adlai88
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchasesRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description claim to sync trades, track outcomes, and report — the code implements API calls to https://api.simmer.markets, local storage under data/, CLI entrypoints, and a log_trade() helper for other skills. The declared pip dependency (simmer-sdk) and required API key are appropriate for this purpose.
ℹ
Instruction Scope
SKILL.md instructs installing simmer-sdk, setting SIMMER_API_KEY, and running the provided CLI. The runtime instructions and the code operate only on the Simmer API and local files (data/trades.json, data/context.json). Note: the skill exposes a programmatic log_trade() function for other skills to call, which is expected for enrichment but means other installed skills could add context to your stored trades.
✓
Install Mechanism
There is no arbitrary download/install step. The manifest lists a pip dependency (simmer-sdk), which is a standard package-install mechanism. No external URLs, archives, or non-standard installs are present.
ℹ
Credentials
The skill requires a single API credential (SIMMER_API_KEY) which matches its function. However, the code also reads additional environment variables (SIMMER_API_URL, SIMMER_JOURNAL_FETCH_LIMIT, SIMMER_JOURNAL_AUTO_SYNC) not listed in SKILL.md or clawhub.json — this is a minor mismatch you should be aware of but not inherently malicious.
✓
Persistence & Privilege
The skill stores data under its own directory (data/), does not request always:true, and does not modify other skills or global agent settings. It does perform local file writes (trades and context files), which is expected for a journal.
Assessment
This skill appears to do what it says: it needs your Simmer API key so it can fetch your trades and stores them locally under the skill folder (data/trades.json and data/context.json). Before installing: (1) confirm you trust simmer.markets and the simmer-sdk package; (2) be comfortable that the SIMMER_API_KEY grants read access to your trades; (3) note the code also accepts optional env vars (SIMMER_API_URL, SIMMER_JOURNAL_FETCH_LIMIT, SIMMER_JOURNAL_AUTO_SYNC) — review or set those if you need different behavior; (4) review the included Python files if you want to verify how errors and API responses are handled; and (5) consider storing the API key in a secure place and rotating it if you stop using the skill. If you need higher assurance, ask the author for a verified homepage or repository and verify the simmer-sdk package source.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b1m7wynny0whjgwy6bsygq984z02z

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments