Security audit
Polymarket Real Estate Trader
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed Polymarket trading helper that defaults to paper trading and only places real trades when run with the explicit live flag.
Install only if you intend to use an automated trading helper. Start in paper mode, protect and limit the SIMMER_API_KEY, review the unpinned simmer-sdk dependency before live use, and use --live only when you intentionally want real USDC trades.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.