Polymarket Bundle Overwatch Bo3 Trader
v1.0.1Trades structural arbitrage between Overwatch BO3 series winner markets and individual game winner markets on Polymarket. P(BO3 winner) must be mathematicall...
⭐ 0· 91·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill is described as a Polymarket BO3 arbitrage trader and the code + SKILL.md implement market discovery, implied probability calculation, sizing, and trade execution via a SimmerClient. The clawhub.json and SKILL.md require SIMMER_API_KEY and the pip dependency 'simmer-sdk', which are appropriate for trading. Minor inconsistency: the top-level registry summary in the prompt earlier claimed 'Required env vars: none', but the skill files (clawhub.json and SKILL.md) do require SIMMER_API_KEY. This is likely a metadata packaging omission rather than functional incoherence.
Instruction Scope
SKILL.md and trader.py limit actions to market discovery, parsing, risk gates, and trade placement (paper by default, live only with --live). The instructions and code do not attempt to read unrelated local files, system credentials, or contact endpoints outside the trading client. The skill references only Simmer APIs and markets, and tunables are explicit.
Install Mechanism
No archive downloads or unusual install steps; the manifest declares a pip dependency 'simmer-sdk' in clawhub.json. Using pip is expected for SDK access but carries the usual risk that the package will execute arbitrary Python on install/runtime — review the simmer-sdk source or verify its provenance before installing in a sensitive environment.
Credentials
The skill requests a single purpose credential (SIMMER_API_KEY) used to instantiate SimmerClient and execute trades; tunables are configurable via environment variables. No unrelated credentials or system paths are requested. The earlier registry summary incorrectly stated no required env vars; the true requirement (SIMMER_API_KEY) is justified by the skill's function.
Persistence & Privilege
The skill is not always-enabled, autostart is false, and cron is null. It does not request elevated agent-wide privileges or modify other skills. Autonomous invocation (disable-model-invocation=false) is the platform default and is not by itself a concern here.
Assessment
This skill appears to do what it claims (a Polymarket BO3 structural-arb trader). Before installing or running live: 1) Confirm the SIMMER_API_KEY scope and rotate/limit its permissions if possible (treat it as high-value). 2) Review or verify the simmer-sdk package (source, version, reputation) since pip packages can execute code. 3) Run in paper/sim mode first (default) and only enable --live after testing. 4) Note the small registry metadata mismatch (some summary metadata omitted the SIMMER_API_KEY requirement) — prefer the requirement declared in clawhub.json/SKILL.md. If you do not trust the Simmer SDK or the SIMMER_API_KEY holder, do not run with --live.Like a lobster shell, security has layers — review code before you run it.
latestvk978kszbxncpb0ddzdwj2z0pz1847kgw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.