Security audit

Kalshi Econ Bin Sum Trader

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed dry-run-by-default trading skill whose sensitive wallet and trading access matches its stated live-trading purpose, but users should treat live mode as real-money automation.

Install only if you intend to use an automated trading tool. Run it in dry-run first, use limited Simmer/Kalshi authority and a dedicated low-balance Solana wallet for live mode, review or pin simmer-sdk before providing secrets, and do not treat the strategy language as a guarantee of profit or safety.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Intent-Code Divergence

Medium

Confidence: 95% confidence
Finding: The manifest says only SIMMER_API_KEY is required, while later documentation also requires SOLANA_PRIVATE_KEY for live trading. This mismatch can cause operators or automated tooling to under-classify the sensitivity of the skill, leading to accidental provisioning of a signing key without proper review, or failed deployments that encourage unsafe ad hoc secret handling.

Description-Behavior Mismatch

High

Confidence: 98% confidence
Finding: The manifest requests SOLANA_PRIVATE_KEY even though the skill is described as a Kalshi CPI bin trader and only declares simmer-sdk as a dependency. That mismatch creates unjustified access to a highly sensitive credential and could enable wallet compromise or unauthorized blockchain transactions if the entrypoint uses the secret for purposes unrelated to the stated trading strategy.

Context-Inappropriate Capability

High

Confidence: 99% confidence
Finding: Access to a blockchain wallet private key is not justified by the stated purpose of trading Kalshi economic range-bin markets. Requiring an unrelated private key expands the blast radius far beyond the skill's function and makes secret theft or misuse materially more dangerous because private keys are typically irreversible, high-value credentials.

Description-Behavior Mismatch

Medium

Confidence: 94% confidence
Finding: The skill performs automated market discovery and imports external Kalshi markets, which materially expands its behavior beyond the stated strategy of normalizing and trading CPI bin markets. This increases operational and security risk because the set of tradable assets is no longer constrained to a pre-vetted universe, and the imported market metadata becomes a larger external input surface that can drive autonomous trading decisions.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The manifest declares a private key requirement without any user-facing warning that the skill will receive a sensitive wallet secret. Even if the key were somehow needed, the lack of disclosure prevents informed consent and obscures the risk that installation exposes a credential capable of moving assets or signing transactions.

Static analysis

No suspicious patterns detected.