Security audit
Polymarket Twitter Bin Decay Trader
Security checks across malware telemetry and agentic risk
Overview
This trading skill is mostly transparent and defaults to paper mode, but some documented live-trading safety filters are not actually enforced in the code.
Review this before installing for live use. Paper mode is the default, but do not provide a live-capable SIMMER_API_KEY or pass --live unless you accept that some documented safeguards are incomplete. Audit simmer-sdk, use a limited trading account, keep position tunables conservative, and verify the missing volume/date filters if relying on them for risk control.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.