Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Kalshi Econ Fed Link Trader

v1.0.1

Cross-market strategy that uses CPI bin prices to estimate CPI level, then adjusts Fed rate market positions via a sensitivity model. High CPI means Fed less...

0· 78·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for diagnostikon/kalshi-econ-fed-link-trader.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Kalshi Econ Fed Link Trader" (diagnostikon/kalshi-econ-fed-link-trader) from ClawHub.
Skill page: https://clawhub.ai/diagnostikon/kalshi-econ-fed-link-trader
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install kalshi-econ-fed-link-trader

ClawHub CLI

Package manager switcher

npx clawhub@latest install kalshi-econ-fed-link-trader
Security Scan
Capability signals
CryptoRequires wallet
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill's name/description (cross-market trading using CPI bin prices to trade Fed markets) align with its declared requirements: a Simmer API key and a Solana private key for live execution. The pip dependency (simmer-sdk) is expected for a Simmer-integrated trader.
Instruction Scope
SKILL.md and trader.py describe CPI bin parsing, sensitivity modeling, and trade execution; instructions are scoped to trading. However, front-matter in SKILL.md lists only SIMMER_API_KEY while other sections and clawhub.json require both SIMMER_API_KEY and SOLANA_PRIVATE_KEY (minor inconsistency). The code attempts to import an optional 'tradejournal' from either an external package or a local skills.tradejournal module — importing a 'skills' package could access other skill modules if present, so confirm what that module does. Also, the runtime file provided in the prompt was truncated; I could not inspect the remainder of trader.py to verify there are no network calls or hidden endpoints beyond expected trading APIs.
Install Mechanism
There is no external arbitrary download/install spec. clawhub.json declares a pip dependency on 'simmer-sdk', which matches the SKILL.md and code import. This is a normal install pattern for a Python SDK; review the simmer-sdk package source before using live credentials.
Credentials
Requested environment variables (SIMMER_API_KEY and SOLANA_PRIVATE_KEY) are proportionate to a trading skill and are explicitly documented. Both are high-value credentials (especially the Solana private key). The skill also reads AUTOMATON_MAX optionally; no unrelated secrets or broad platform credentials are requested. The documentation inconsistency about required envs is worth fixing before install.
Persistence & Privilege
The skill is not marked 'always: true' and automaton.autostart is false. It declares an entrypoint for managed automaton execution but won't autostart on install. Autonomous invocation by the agent is allowed (platform default) but not elevated here.
Scan Findings in Context
[pre-scan-injection] expected: Static pre-scan reported no injection signals. That matches expectations for a trading skill but does not substitute for a full code audit.
What to consider before installing
What to consider before installing: - Do not provide your real SOLANA_PRIVATE_KEY or SIMMER_API_KEY until you audit the full code and the simmer-sdk dependency. The Solana private key is high-value and can transfer funds. - The prompt-provided trader.py was truncated; ensure you (or someone you trust) review the entire trader.py and any code in simmer-sdk for network endpoints, telemetry, or credential exfiltration before enabling live trading. - Use the default dry-run mode first (the skill states live trades only run with --live). Test thoroughly with paper/dry-run and small sandbox credentials or accounts. - If you decide to go live: limit financial exposure (set MAX_POSITION_USD small, low max trades, and conservative slippage), use a dedicated account with minimal funds, and rotate keys if you later remove the skill. - Confirm what optional integrations do (e.g., tradejournal or skills.tradejournal) — they may call external services or read local files; disable or inspect them if you don't need them. - Verify clawhub.json/ SKILL.md inconsistencies (SKILL.md front-matter omits SOLANA_PRIVATE_KEY) are resolved so required credentials are clear. If you want, I can: (a) scan the remainder of trader.py (provide full file), (b) fetch and summarize the simmer-sdk package source, or (c) identify exact code locations where credentials are read/used.

Like a lobster shell, security has layers — review code before you run it.

latestvk978fwpn00qfzkkpg6h1wnm421846scg
78downloads
0stars
2versions
Updated 3w ago
v1.0.1
MIT-0

Kalshi Econ Fed Link Trader

This is a template.
The default signal uses a static CPI-to-Fed sensitivity table -- remix it with live CME FedWatch data, yield curve signals, or Taylor Rule models.
The skill handles all the plumbing (market discovery, trade execution, safeguards). Your agent provides the alpha.

Strategy Overview

CPI data and Fed rate decisions are deeply linked. This skill reads CPI bin market prices to estimate the current CPI level, then uses a DATA_SENSITIVITY table to compute fair probabilities for Fed rate cut/hold/hike markets. When the Fed market price diverges from the model, trade the edge.

Key advantages:

  • Cross-market signal -- uses information from one market type to trade another
  • Fundamental economic linkage -- CPI-to-Fed is the most documented macro relationship
  • DATA_SENSITIVITY table -- calibrated from historical Fed reaction function
  • No external data needed -- all inputs come from Kalshi market prices

Signal Logic

CPI-to-Fed Linkage Model

  1. Scan CPI bin markets and extract probability-weighted expected CPI level
  2. Look up model Fed probabilities from DATA_SENSITIVITY table
  3. Interpolate between table entries for precise CPI levels
  4. Compare model probability to Fed market price
  5. Trade when |model - market| >= entry_edge

DATA_SENSITIVITY Table

CPI LevelP(Cut)P(Hold)P(Hike)
1.0%85%12%3%
2.0%55%38%7%
2.5%20%65%15%
3.0%5%55%40%
4.0%1%24%75%
5.0%0%10%90%

Conviction-Based Sizing

  • conviction = min(|edge| / entry_edge, 2.0) / 2.0
  • size = max($1.00, conviction * MAX_POSITION_USD)
  • Larger edge = larger position, capped at MAX_POSITION_USD

Remix Ideas

  • CME FedWatch: Compare model to CME futures-implied Fed probabilities
  • Yield curve signal: Add 2y-10y spread as additional Fed predictor
  • Taylor Rule: Replace sensitivity table with formal Taylor Rule computation
  • Real-time CPI nowcast: Use Cleveland Fed nowcast instead of bin prices

Risk Parameters

ParameterDefaultNotes
Entry edge10%Min model-vs-market divergence to trade
Exit threshold45%Sell when position price reaches this
Max position size$5.00 USDCPer market
Max trades per run3Rate limiting
Max slippage15%Skip if slippage exceeds
Min liquidity$0Disabled by default

Installation & Setup

clawhub install kalshi-econ-fed-link-trader

Requires: SIMMER_API_KEY and SOLANA_PRIVATE_KEY environment variables.

Cron Schedule

Cron is set to null -- the skill does not run on a schedule until you configure it in the Simmer UI.

Safety & Execution Mode

The skill defaults to dry-run mode. Real trades only execute when --live is passed explicitly.

ScenarioModeFinancial risk
python trader.pyDry runNone
Cron / automatonDry runNone
python trader.py --liveLive (Kalshi via DFlow)Real USDC

The automaton cron is set to null -- it does not run on a schedule until you configure it in the Simmer UI. autostart: false means it won't start automatically on install.

Required Credentials

VariableRequiredNotes
SIMMER_API_KEYYesTrading authority. Treat as a high-value credential.
SOLANA_PRIVATE_KEYYesBase58-encoded Solana private key for live trading.

Tunables (Risk Parameters)

All risk parameters are declared in clawhub.json as tunables and adjustable from the Simmer UI without code changes.

VariableDefaultPurpose
SIMMER_ECON_FEDLINK_ENTRY_EDGE0.10Min divergence between model and market to trigger trade
SIMMER_ECON_FEDLINK_EXIT_THRESHOLD0.45Sell position when price reaches this level
SIMMER_ECON_FEDLINK_MAX_POSITION_USD5.00Max USDC per trade
SIMMER_ECON_FEDLINK_MAX_TRADES_PER_RUN3Max trades per execution cycle
SIMMER_ECON_FEDLINK_SLIPPAGE_MAX0.15Max slippage before skipping (0.15 = 15%)
SIMMER_ECON_FEDLINK_MIN_LIQUIDITY0Min market liquidity USD (0 = disabled)

Dependency

simmer-sdk is published on PyPI by Simmer Markets.

Review the source before providing live credentials if you require full auditability.

Comments

Loading comments...