ClawHub
Back to skill

Security audit

MLB Live Trader

Security checks for vulnerabilities and agentic risk

Overview

This skill is a clearly disclosed MLB prediction-market trading tool with explicit live-mode opt-in and bounded local risk controls.

Install only if you intend to connect a Simmer account for MLB prediction-market analysis or trading. Keep SIMMER_API_KEY in a managed secret store, start in paper mode, read the disclaimer, and do not run --live until you have initialized live state, reviewed the daily budget and per-order limits, and are prepared for real-money loss.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
96% confidence
Finding
The skill documentation describes capabilities to read environment variables, read and write files, access the network, and invoke shell commands, yet no explicit permissions are declared. This creates a transparency and policy-enforcement gap: an operator or platform may approve the skill without realizing it can access secrets, persist state, or execute external commands.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The manifest explicitly supports live market access, automated execution, budgeting, and trade-frequency controls, which indicates the skill can place real-money trades without any adjacent warning, consent gate, or explicit disclosure of financial/system-impacting behavior. In this context, the omission is dangerous because users or orchestrators may invoke the skill as if it were an informational analytics tool, while it is actually capable of autonomous market actions using a supplied API key.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The CLI allows real trading with --live and proceeds directly into execution without an explicit interactive confirmation or equivalent one-time arming step. In a financial trading skill, this increases the chance of accidental real-money orders from operator error, automation misuse, or misunderstood defaults, which can cause immediate monetary loss.

Static analysis

No suspicious patterns detected.