ClawHub
Back to skill

Security audit

Probability Mean Reversion

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Polymarket analysis guide with no executable code, credentials, persistence, or trading automation.

Install only if you want agent help researching a Polymarket mean-reversion strategy. Treat the output as trading research, not financial advice; require explicit confirmation before any live trade, verify liquidity and recent news yourself, and avoid applying it to generic market prompts or low-liquidity markets.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The trigger list is broad enough to activate on common trading-language prompts such as 'fade', 'range trading', or 'panic buy', which can cause the agent to select this skill in contexts where the user did not explicitly request this specific strategy. In a financial-trading skill, incorrect auto-selection is materially risky because it can steer analysis or recommendations toward speculative mean-reversion behavior without sufficient validation of suitability, market regime, or user intent.

Static analysis

No suspicious patterns detected.