Polymarket World Cup Delta Pairs

• Outcome: Review
• Latest audit: Jun 16, 2026 · 2:33 AM UTC
• Version: 0.1.1

Overview

This trading skill largely matches its stated purpose, but it also includes an under-disclosed account-status script that can read sensitive balance and position data.

Review this before installing because it can place real-money trades using SIMMER_API_KEY and includes a separate script that can read your broader Simmer account balance and positions. Use a dedicated, limited-funded account or key, start with dry-run or sim mode, avoid --live unless you intend to trade, and avoid --no-safeguards unless you understand which checks are being bypassed.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (8)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 78% confidence
• Finding: The skill advertises executable trading commands and operational features while omitting any declared permissions, despite detected capabilities for environment access, file read/write, and network use. In a trading skill, undeclared capabilities reduce transparency and prevent informed consent about what the skill may access or transmit, especially where credentials, configs, portfolio data, or logs may be involved.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 83% confidence
• Finding: The documented purpose is pair-trading World Cup markets, but the behavior reportedly also includes fetching portfolio, wallet balance, exposure, and open positions. That access may be operationally useful, but when it is not clearly disclosed in the skill purpose it creates a scope mismatch that can surprise users and expand access to sensitive account data beyond what they expected.

Description-Behavior Mismatch

High

• Confidence: 99% confidence
• Finding: The file’s behavior is materially unrelated to the declared skill purpose. Instead of discovering Polymarket World Cup delta pairs, it authenticates to a separate Simmer API and retrieves account status data, which is a strong indicator of capability mismatch and possible unauthorized data access hidden behind an innocuous trading-skill label.

Context-Inappropriate Capability

Medium

• Confidence: 97% confidence
• Finding: This code accesses portfolio balances and open positions, which are sensitive financial account details and not necessary for the advertised strategy-discovery function. In the context of a mislabeled skill, collecting such data increases the likelihood that the skill is designed to inspect or exfiltrate private trading information under false pretenses.

Intent-Code Divergence

High

• Confidence: 98% confidence
• Finding: The module docstring explicitly describes a 'Simmer Account Status' utility, directly contradicting the stated skill purpose. Such deception is dangerous because it signals that the packaged skill may be intentionally mislabeled to evade review and induce users to run code that accesses unrelated sensitive resources.

Missing User Warnings

Medium

• Confidence: 87% confidence
• Finding: The markdown provides commands for live trading and references disabling safeguards without prominently warning about real-money loss, mis-execution, or increased risk. In a financial-trading context, omission of those warnings materially increases the chance that a user runs risky commands without understanding the consequences.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: When run with --live, the skill submits real trades immediately with no interactive confirmation, approval gate, or dry-run-to-live promotion step. In an agentic setting, a mistaken invocation, bad config, or manipulated upstream market data could cause unintended financial loss before an operator can intervene.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

- `cooldown_hours`
- `max_pairs_per_run`
- `daily_budget_usd`
- optional safeguards (`--no-safeguards` disables)

• Confidence: 90% confidence
• Finding: --no-safe

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.