ClawHub
Back to skill

Security audit

Polymarket Combo Builder

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Polymarket combo trading tool with explicit dry-run and live modes, but users should treat it carefully because live use involves wallet credentials and real-money orders.

Install only if you are comfortable giving the tool a Simmer API key and, for live trading, a local Polymarket wallet private key. Run dry-run first, verify every leg and the stake, use --live only for trades you intend to place, and consider pinning or reviewing dependencies before using it with meaningful funds.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill documentation instructs use of sensitive environment material (`WALLET_PRIVATE_KEY`) and writing `combo_config.json`, but the skill declares no permissions. That mismatch can cause an agent platform or reviewer to underestimate the skill's ability to access secrets and modify local files, which is especially risky here because the skill can place real-money orders and activate wallet approvals.

Unpinned Dependencies

Low
Category
Supply Chain
Content
simmer-sdk>=0.20.1
requests>=2.28
websockets>=12.0
Confidence
97% confidence
Finding
simmer-sdk>=0.20.1

Unpinned Dependencies

Low
Category
Supply Chain
Content
simmer-sdk>=0.20.1
requests>=2.28
websockets>=12.0
Confidence
99% confidence
Finding
requests>=2.28

Unpinned Dependencies

Low
Category
Supply Chain
Content
simmer-sdk>=0.20.1
requests>=2.28
websockets>=12.0
Confidence
98% confidence
Finding
websockets>=12.0

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High
Category
Supply Chain
Confidence
92% confidence
Finding
requests

Known Vulnerable Dependency: websockets — 4 advisory(ies): CVE-2018-1000518 (websockets is vulnerable to denial of service by memory exhaustion); CVE-2021-33880 (Observable Timing Discrepancy in aaugustin websockets library); CVE-2018-1000518 (aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly C) +1 more

High
Category
Supply Chain
Confidence
90% confidence
Finding
websockets

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical
Code
suspicious.dynamic_code_execution
Location
tests/test_combo_builder.py:16