Security audit
Security checks across malware telemetry and agentic risk
This is a disclosed paper-first MLB trading skill that can place capped real-money orders only when the user explicitly enables live mode.
Use paper mode first. Only enable --live if you understand prediction-market and jurisdictional risk and are willing to lose the capped funds. Avoid --no-safeguards in live mode unless you deliberately accept weaker SDK context checks, and keep API keys and wallet material in environment-managed secrets rather than config files.
):
return SafeguardResult(False, f"SDK context warning: {warning}", context=context)
# Readiness/exposure preflight remains mandatory even with --no-safeguards.
preflight = client.preflight(
venue=VENUE if live else "sim",
planned_amount=plan.amount_usd,help="persist a config override; repeatable",
)
parser.add_argument(
"--no-safeguards",
action="store_true",
help="skip SDK context/discipline checks; hard risk controls and preflight remain",
)65/65 vendors flagged this skill as clean.
No suspicious patterns detected.