Polymarket Agent
v1.0.2Autonomous prediction market agent - analyzes markets, researches news, and identifies trading opportunities
⭐ 25· 6.3k·45 current·49 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description (Polymarket trading agent) align with required binaries (python, pip), the POLYMARKET_KEY credential, and included modules (py-clob-client, web3). The code talks to expected endpoints (gamma-api.polymarket.com, clob.polymarket.com). One minor inconsistency: registry metadata in the header lists source/homepage as unknown/none while pyproject.toml and SKILL.md include clawdhub/github URLs — verify upstream origin before installing.
Instruction Scope
SKILL.md instructs the agent to perform broad web searches, social media sentiment scraping, scheduled cron monitoring, and to use Clawdbot memory — all relevant for market research but granting broad network and memory access. The configuration flow prompts the user to provide a Polygon private key (POLYMARKET_KEY) and then stores it via 'clawdbot config set' (configure.py). Persisting private keys into a global skill config is sensitive and should be validated by the user. The agent is also instructed to fetch full URL contents and run cron jobs — these are powerful capabilities and could leak strategy or secrets if misused or if the skill were compromised.
Install Mechanism
There is no remote download/install URL; the project includes a local install.sh that creates a venv and installs requirements.txt. Dependencies are standard for the task (py-clob-client, web3, requests, etc.). No use of URL shorteners or arbitrary remote archives. Installing third-party Python packages (py-clob-client, web3) carries the usual supply-chain risk; verify package provenance if needed.
Credentials
The single required env var is POLYMARKET_KEY, which is appropriate for a trading agent but is a highly sensitive secret (a wallet private key). The skill's configure.py attempts to store that key into Clawdbot's persistent config (skills.entries.polymarket-agent.env.POLYMARKET_KEY). Persisting a private key in a global config (even locally) increases risk; users should prefer ephemeral/local-only secrets or a dedicated signing service. The code also reads an optional INTERESTS env var not declared in the metadata (minor).
Persistence & Privilege
always:false (good). The skill uses the 'clawdbot config' CLI to write persistent configuration entries under its own skill path — this is expected for storing settings but it does modify the agent's persistent config. It does not request system-wide elevated privileges or modify other skills' configurations beyond its own namespace.
What to consider before installing
This package appears to be what it says (an autonomous Polymarket trading agent), but it asks for a wallet private key and will persist it into your Clawdbot config if you follow setup. Before installing: 1) Verify the skill's source/repository and author (registry metadata showed 'unknown' while the package files reference clawdhub/github). 2) Do NOT use your main/high-value wallet key — create a dedicated wallet with minimal USDC for testing. 3) Prefer setting POLYMARKET_KEY in your shell session (ephemeral) rather than saving it to global config, or review where Clawdbot stores config and ensure it's encrypted/accessible only to you. 4) Keep autonomous trading disabled until you have fully reviewed and tested trade flows manually. 5) Audit third-party dependencies (py-clob-client, web3) and run the skill in an isolated environment (VM/container) during initial testing. 6) If you cannot verify the publisher or repository, treat this package as higher risk and avoid providing private keys.Like a lobster shell, security has layers — review code before you run it.
latestvk972r277c2b9qz58th06tded71800gx0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎰 Clawdis
OSmacOS · Linux · Windows
Binspython, pip
EnvPOLYMARKET_KEY
Primary envPOLYMARKET_KEY