Simmer Calibration Report

Run a calibration report on any Simmer trade journal. Win rate and EV broken down by strategy, time of day, price band, and market type. Know exactly where y...

This skill appears to be a straightforward analytics script for local Simmer trade journals, but there are a few things to check before installing or supplying secrets: - Inconsistency: the registry metadata claims no required env vars, but the bundled files (clawhub.json and SKILL.md) require SIMMER_API_KEY. Verify whether you actually need to provide an API key for your use case. If you only want to analyze a local journal file, you should be able to avoid setting the key. - Search the full calibration_report.py (the provided snippet is truncated) for any code paths that call get_client() or other network I/O. If the script will contact Simmer's API, decide whether you trust sending that API key and whether the calls are necessary. - If you are unsure, run the script locally in an isolated environment (container or VM) and point CALIB_JOURNAL_PATH to a copy of your journal. Do not export SIMMER_API_KEY unless you confirm the script needs it. - The skill auto-detects a workspace path (default ~/.openclaw/workspace). If you install it, set CALIB_JOURNAL_PATH explicitly to the exact file you want analyzed to avoid unexpected file access. - Review simmer-sdk (the dependency) or run in a virtualenv to limit side effects; inspect simmer_sdk.skill.load_config/update_config behavior so you understand whether it writes config files. If you want, I can scan the rest of calibration_report.py (the truncated portion) for any network calls, secrets exfiltration, or calls to get_client()/SimmerClient to improve confidence.

Type: OpenClaw Skill Name: simmer-calibration-report Version: 1.0.4 The skill bundle is a legitimate analytical tool designed to process trade journals (JSONL files) and generate performance reports. The Python code in calibration_report.py performs standard data processing, filtering, and statistical calculations without any evidence of malicious execution, data exfiltration, or prompt injection. It uses a dedicated SDK (simmer-sdk) for configuration management and follows the expected patterns for an OpenClaw AgentSkill.