Polymarket Nordic Trader

• Outcome: Review
• Latest audit: May 29, 2026 at 9:36 PM UTC
• Version:
  0.0.3

Overview

This skill is openly for automated prediction-market trading, but live mode can place real trades using an API key without strong install-time permission declarations or documented risk limits.

Review this carefully before installing. Use dry-run first, provide only a least-privilege or sandbox trading key if available, set explicit position and loss limits outside the skill, and do not enable --live or cron execution until you understand what trades the API key can authorize.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 82% confidence
• Finding: The skill explicitly requires the `SIMMER_API_KEY` environment variable and describes live trading behavior, but the metadata shown does not declare corresponding permissions/capabilities. This creates a transparency and governance gap: an agent or platform user may not realize the skill consumes sensitive credentials and can access trading authority, increasing the chance of unsafe deployment or credential exposure.

VirusTotal

66/66 vendors flagged this skill as clean.