ClawHub

Polymarket Bundle Crypto Fade Trader

Security checks across malware telemetry and agentic risk

Overview

This appears to be an automated trading skill with a high-impact credential requirement and an apparent trade-direction ambiguity that could cause unintended real-money trades.

Install only if you understand the trading authority granted by SIMMER_API_KEY. Keep dry-run mode on until the trade-direction mapping is corrected and tested, and avoid using live mode with real funds unless the manifest clearly declares the credential and the strategy’s YES/NO actions are verified.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
84% confidence
Finding
The skill explicitly relies on the `SIMMER_API_KEY` environment variable, which is a sensitive trading credential, yet the static analysis indicates no corresponding declared permissions. That creates a security governance gap: reviewers and execution platforms may not understand that the skill needs access to secrets, increasing the chance of over-broad secret exposure or unsafe deployment assumptions.

Intent-Code Divergence

Medium
Confidence
97% confidence
Finding
The strategy description says a strong-up streak should be faded by taking the down side on the next interval, but the instruction 'sell NO' does the opposite economically in a binary market because selling NO is equivalent to buying YES/up exposure. In live trading this can systematically invert the strategy, causing the agent to chase momentum instead of mean-reverting and potentially incur repeated real-money losses.

VirusTotal

58/58 vendors flagged this skill as clean.

View on VirusTotal