Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Kalshi Crypto Monotonicity Trader

v1.0.5

Enforces monotonicity constraints on crypto price-level markets on Kalshi. P(BTC > $110k) must always >= P(BTC > $120k). Trades violations by buying underpri...

0· 113·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for diagnostikon/kalshi-crypto-monotonicity-trader.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Kalshi Crypto Monotonicity Trader" (diagnostikon/kalshi-crypto-monotonicity-trader) from ClawHub.
Skill page: https://clawhub.ai/diagnostikon/kalshi-crypto-monotonicity-trader
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install kalshi-crypto-monotonicity-trader

ClawHub CLI

Package manager switcher

npx clawhub@latest install kalshi-crypto-monotonicity-trader
Security Scan
Capability signals
CryptoRequires wallet
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name/description claim Kalshi/crypto monotonicity trading using the Simmer SDK, and the code (trader.py) calls SimmerClient and market-discovery APIs which is coherent. However registry metadata at the top reported 'no required env vars' while SKILL.md and clawhub.json require SIMMER_API_KEY and SOLANA_PRIVATE_KEY — that mismatch is an incoherence. Requiring a SOLANA_PRIVATE_KEY for a Kalshi-targeted strategy is plausible if Simmer settles via Solana/DFlow, but that relationship is not explained in the README; the need for a blockchain private key versus a trading API key should be explicitly justified.
Instruction Scope
SKILL.md instructions focus on discovery, checking monotonicity, and optionally executing trades; trader.py implements market discovery, violation detection and (presumably) order execution. The SKILL.md and code reference other env vars (TRADING_VENUE, AUTOMATON_MAX_BET) and optional integrations (tradejournal) that are not listed in the top-level 'requires' section — the agent will read those env vars if present. The skill performs network I/O to the Simmer API and may import/introduce markets into Simmer; it does not appear to read arbitrary user files, but the code is truncated in the listing so full behavior (e.g., where private keys are used) is not completely visible.
Install Mechanism
This is an instruction/code bundle with no download-from-URL installer. Dependencies are a PyPI package 'simmer-sdk' (declared in SKILL.md and clawhub.json). That is a standard mechanism; the user should still review the simmer-sdk package source before giving live credentials.
!
Credentials
The skill requires SIMMER_API_KEY (expected for an SDK-based trading skill) and requests SOLANA_PRIVATE_KEY (highly sensitive). The SOLANA_PRIVATE_KEY request is proportionate only if Simmer executes trades on Solana/DFlow and requires a signing key — but that relationship is not demonstrated or audited here. The code also reads optional env vars (AUTOMATON_MAX_BET, TRADING_VENUE) that are not listed in SKILL.md's declared 'required' table, creating an incomplete credential picture.
Persistence & Privilege
The skill is not 'always:true', autostart is false, and it defaults to dry-run. clawhub.json indicates the automaton is 'managed' and an entrypoint exists, so the platform can run it when you enable it, which is expected for a trading skill. No evidence of it modifying other skills or requesting elevated platform-wide privileges.
What to consider before installing
This skill mostly looks like a legitimate trading helper, but you should NOT provide high-value credentials (especially SOLANA_PRIVATE_KEY) without auditing the Simmer SDK and the skill's full code path for how the key is used. Actions to take before installing or running live: 1) Inspect the simmer-sdk source and confirm why a Solana private key is required (ask the publisher or review docs). 2) Run the skill in dry-run with no live credentials to validate discovery and logic. 3) If you must test live, create restricted API keys or use a dedicated low-value Solana account with minimal funds and rotate keys afterward. 4) Verify clawhub.json / SKILL.md inconsistencies (declared required envs) are resolved by the publisher. 5) Because part of trader.py was truncated in the listing, provide the full file for a final audit — that could change the assessment.

Like a lobster shell, security has layers — review code before you run it.

latestvk974ytjnsdaxf2707tsfwwpsh9847av7
113downloads
0stars
6versions
Updated 3w ago
v1.0.5
MIT-0

Kalshi Crypto Monotonicity Trader

This is a template.
The default signal enforces monotonicity on crypto price-level bins -- remix it with real-time order book data, implied volatility surfaces, or cross-exchange price feeds.
The skill handles all the plumbing (market discovery, trade execution, safeguards). Your agent provides the alpha.

Strategy Overview

Crypto price-level markets on Kalshi price "Will BTC be above $X?" for various thresholds. By definition, P(BTC > $110k) >= P(BTC > $120k) because the first event subsumes the second. When the market violates this, we capture the arbitrage by buying the underpriced contract and selling the overpriced one.

Key advantages:

  • Pure math arbitrage -- no model or opinion needed, just logical consistency
  • Works for BTC and ETH -- any asset with multiple price-level markets
  • Self-correcting -- violations close quickly, so early detection matters

Signal Logic

Monotonicity Check

  1. Fetch all crypto price-level markets (BTC above $X, ETH above $Y)
  2. Group by asset, sort by price level ascending
  3. Verify P(above lower level) >= P(above higher level) for all pairs
  4. When violation exceeds violation_threshold, generate paired trades

Example (with defaults)

MarketLevelMarket PExpectedViolation
BTC > $100k$100,00045%>= 35%--
BTC > $110k$110,00035%>= 20%--
BTC > $120k$120,00038%<= 35%3%

In the last row, P(>$120k) = 38% > P(>$110k) = 35%, violating monotonicity by 3%.

Remix Ideas

  • Order book depth: Weight violations by available liquidity at each level
  • Implied vol surface: Use violation patterns to infer mispriced implied volatility
  • Cross-exchange arb: Compare Kalshi levels to Deribit options strikes

Risk Parameters

ParameterDefaultNotes
Violation threshold3%Min probability gap to trigger trade
Exit threshold45%Sell when position price reaches this
Max position size$5.00 USDCPer market
Max trades per run3Rate limiting
Max slippage15%Skip if slippage exceeds
Min liquidity$0Disabled by default

Installation & Setup

clawhub install kalshi-crypto-monotonicity-trader

Requires: SIMMER_API_KEY and SOLANA_PRIVATE_KEY environment variables.

Cron Schedule

Cron is set to null -- the skill does not run on a schedule until you configure it in the Simmer UI.

Safety & Execution Mode

The skill defaults to dry-run mode. Real trades only execute when --live is passed explicitly.

ScenarioModeFinancial risk
python trader.pyDry runNone
Cron / automatonDry runNone
python trader.py --liveLive (Kalshi via DFlow)Real USDC

The automaton cron is set to null -- it does not run on a schedule until you configure it in the Simmer UI. autostart: false means it won't start automatically on install.

Required Credentials

VariableRequiredNotes
SIMMER_API_KEYYesTrading authority. Treat as a high-value credential.
SOLANA_PRIVATE_KEYYesBase58-encoded Solana private key for live trading.

Tunables (Risk Parameters)

All risk parameters are declared in clawhub.json as tunables and adjustable from the Simmer UI without code changes.

VariableDefaultPurpose
SIMMER_CRYPTO_MONO_VIOLATION_THRESHOLD0.03Min probability gap between adjacent levels to trigger trade
SIMMER_CRYPTO_MONO_EXIT_THRESHOLD0.45Sell position when price reaches this level
SIMMER_CRYPTO_MONO_MAX_POSITION_USD5.00Max USDC per trade
SIMMER_CRYPTO_MONO_MAX_TRADES_PER_RUN3Max trades per execution cycle
SIMMER_CRYPTO_MONO_SLIPPAGE_MAX0.15Max slippage before skipping (0.15 = 15%)
SIMMER_CRYPTO_MONO_MIN_LIQUIDITY0Min market liquidity USD (0 = disabled)

Dependency

simmer-sdk is published on PyPI by Simmer Markets.

Review the source before providing live credentials if you require full auditability.

Comments

Loading comments...