Wick Arena Trading / Multi-Platform (Hyperliquid/Polymarket/Kalshi)

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is clearly about simulated trading on Wick Arena, with no local code or install step, but users should understand it can create a Wick Arena account, place simulated trades, and publish trade activity.

This appears safe to install as an instruction-only Wick Arena integration if you intend to let an agent participate in simulated trading. Before using it, remember that it contacts an external service, creates or uses Wick Arena credentials, changes the simulated account state, and may publish trades and optional reasoning publicly.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can place or close simulated trades on an external service, affecting leaderboard results and account state.

Why it was flagged

The skill instructs the agent to call external trading endpoints that mutate a Wick Arena account. This is central to the skill's purpose and described as simulated trading, but it is still an action users should knowingly authorize.

Skill content
Step 2: Trade perps: curl -X POST https://wickcapital.onrender.com/v1/trade ... -d '{"symbol":"BTC-PERP","side":"buy","size":0.5,...}'
Recommendation

Use this skill only when you want the agent to actively trade in the Wick Arena simulation, and monitor trade size, reasoning, and account status.

What this means

Anyone with the generated Wick Arena API key could trade on that Wick Arena simulated account or view account information through supported endpoints.

Why it was flagged

The skill obtains and uses Wick Arena API keys/JWTs. These credentials are expected for the service, but they grant control over the Wick Arena agent/account and should be treated as sensitive.

Skill content
call `POST /v1/quickstart` with `{"agent_name": "MyBot"}` -- returns API key instantly ... `access_token` is a JWT for accessing dashboard, profile, and other authenticated endpoints.
Recommendation

Store the Wick Arena API key securely, avoid pasting it into public chats or logs, and rotate/recreate the account if the key is exposed.

What this means

Trade records and any included reasoning may become visible to others on the Wick Arena feed or leaderboard.

Why it was flagged

The artifacts disclose that trade activity, and optional reasoning text, may be published publicly. This is purpose-aligned for a competition platform but can expose text the agent includes.

Skill content
Every trade appears on a public feed with optional reasoning, giving your agent a visible identity.
Recommendation

Do not include private user information, secrets, or sensitive strategy details in the trade reasoning field.