Security audit

Kalshi Fifa Soccer Trader

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Kalshi soccer trading bot, but it needs review because it combines wallet-based live trading authority with a stealth scraper built to bypass SoFIFA bot protection.

Install only if you are comfortable with automated real-money trading and stealth web scraping. Use a dedicated low-balance Solana wallet, start in dry-run mode, keep small trade limits, avoid --no-safeguards, and review or remove the SoFIFA stealth scraper if you do not accept the compliance and site-access risk.

SkillSpector

By NVIDIA

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Context-Inappropriate Capability

Medium

Confidence: 92% confidence
Finding: The lockfile includes `playwright-extra` together with `puppeteer-extra-plugin-stealth`, a combination specifically used to mask browser automation and evade bot detection. In a skill whose stated purpose is soccer market modeling and Kalshi trading, stealth automation is not necessary for statistical analysis and materially increases the likelihood of terms-of-service evasion, covert scraping, or concealed automated trading behavior.

Context-Inappropriate Capability

Medium

Confidence: 96% confidence
Finding: The script explicitly uses playwright-extra with a stealth plugin and states its purpose is to bypass Cloudflare bot protection. That is a capability for evading an access-control or anti-automation mechanism, which is not necessary for the core skill goal of modeling soccer markets from ratings data. In this context, the skill is a trading/data workflow, so embedding anti-detection scraping materially increases abuse potential and legal/compliance risk.

Context-Inappropriate Capability

Medium

Confidence: 93% confidence
Finding: The browser is launched with automation-evasion flags and a spoofed user environment (custom user agent, headers, locale, timezone, and AutomationControlled suppression). Those measures are commonly used to disguise automation and defeat anti-bot fingerprinting, which broadens the script from ordinary data collection into covert scraping behavior. Given the skill's stated purpose, this makes the file more dangerous because the data-gathering component is designed to evade detection rather than use an authorized source.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The manifest explicitly requires a SOLANA_PRIVATE_KEY and states it will be used for signing DFlow trades, but it does not present any strong warning, consent gating, or safety constraints around automated real-money trading. In a managed automaton context, this increases the chance that a user supplies a hot-wallet key without fully understanding that the skill may autonomously place and sign live transactions, creating material financial loss and key-exposure risk.

Missing User Warnings

Medium

Confidence: 85% confidence
Finding: The skill can place live trades and automatically sell positions when invoked with live/management flags, without any in-code confirmation gate, approval callback, or interactive user acknowledgment. In an agent setting, that increases the risk of unintended financial actions from prompt mistakes, automation errors, or unsafe orchestration, especially because the code directly interfaces with a trading API.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.