ClawHub

Polymarket Bundle Esports Tempo Trader

v1.0.1

Trades tempo inconsistencies across Dota2 and esports game props on Polymarket. Within the same game first blood timing correlates with kill pace and Ends in...

⭐ 0· 73·0 current·0 all-time
by@diagnostikon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description describe a Polymarket esports tempo trader and the package requests only the SIMMER_API_KEY and the simmer-sdk dependency, which are exactly what a Simmer/Polymarket trading skill would need. No unrelated credentials, binaries, or config paths are requested.
✓
Instruction Scope
SKILL.md and trader.py focus on market discovery, parsing, tempo-bundle construction, and trade execution. The skill defaults to paper trading and requires an explicit --live flag for real trades. The docs suggest optional external data sources (Dotabuff, PandaScore) as remix ideas but do not require their credentials; the core instructions do not direct the agent to read unrelated system files or exfiltrate data.
✓
Install Mechanism
No harmful install mechanism: clawhub.json declares a pip dependency on 'simmer-sdk', which is a plausible SDK for interacting with the Simmer service. There is no download-from-URL or archive extraction. Users should still verify the simmer-sdk package source/reputation before installing.
✓
Credentials
Only one high-value environment variable (SIMMER_API_KEY) is required and is justified by the skill's need to authenticate to the Simmer/Polymarket API. Tunables are exposed via clawhub.json but are not secret credentials. No unrelated secrets or multiple external credentials are requested.
✓
Persistence & Privilege
The skill is not force-included (always:false) and autostart/cron are false/null. The automaton entrypoint references trader.py but autostart is disabled, so nothing will run automatically. The skill does call apply_skill_config when available to read tunables, which is expected behavior and limited in scope.
Assessment
This skill appears internally consistent and requests only the SIMMER_API_KEY needed to trade via Simmer; nevertheless: (1) only provide SIMMER_API_KEY if you trust the Simmer service and the skill author — treat it as a high-value credential; (2) keep the default paper mode and avoid running with --live until you have tested behavior and sizing in sim; (3) inspect the simmer-sdk package source (PyPI/GitHub) before installation to ensure it is legitimate; (4) run the skill in an isolated environment or container and rotate the API key after testing; (5) be cautious about enabling or wiring any optional external data feeds (Dotabuff, PandaScore) — add those only if you trust those endpoints and understand what data will be shared.

Like a lobster shell, security has layers — review code before you run it.

latestvk9700f328v7xjyext8zmzhmt6s846mz4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments