Polymarket Copy Dynamic Roster Trader
v1.0.0Automatically discovers and ranks top Polymarket wallets from public leaderboards, evaluates rolling performance, and builds a dynamic copy roster. Feeds qua...
⭐ 0· 28·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim to discover leaderboards and copytrade via Simmer; the code and SKILL.md only reference predicting.top, Polymarket's data-api, and the Simmer SDK. The declared dependency (simmer-sdk) and required env (SIMMER_API_KEY in clawhub.json and SKILL.md) match the stated purpose.
Instruction Scope
SKILL.md and trader.py only instruct/implement fetching public leaderboard data, computing statistics, building a roster, and feeding that roster to the Simmer SDK. The runtime code does not read unrelated local files or request unrelated credentials and does not call unexpected external endpoints beyond predicting.top, data-api.polymarket.com, and the Simmer client.
Install Mechanism
No install spec is provided (instruction-only) and clawhub.json declares a pip requirement for simmer-sdk, which is proportionate and expected. No arbitrary downloads, archives, or obscure URLs are used in the package metadata.
Credentials
The only required secret is SIMMER_API_KEY (declared in clawhub.json and used by trader.py); numerous SIMMER_* tunables are used for trade limits. This is proportionate to a copytrading skill, but the API key grants trading ability — users should verify the key's scope and treat it as sensitive because a compromised key could execute real trades when --live is enabled.
Persistence & Privilege
autostart is false and the skill is not marked always:true. clawhub.json marks automaton.managed with entrypoint 'trader.py', so the platform can schedule/execute it, and the agent may invoke it autonomously (platform default). This combination is expected for an automatable trading skill but increases blast radius if the API key is misused or misconfigured.
Assessment
This skill appears to do what it says, but it can perform real trades when run with a valid SIMMER_API_KEY and a --live flag. Before installing: 1) Review and run it in paper/sim mode first (default) to verify behavior. 2) Only provide a SIMMER_API_KEY that has appropriate, minimal scopes and limits; treat the key as sensitive. 3) Inspect the full trader.py (including the truncated portion) to confirm there are no additional endpoints or unexpected behaviors. 4) Use conservative tunables (MAX_POSITION, COPY_MAX_USD, COPY_MAX_TRADES) initially, and monitor logs/transactions closely. 5) If you do not want autonomous live trading, ensure the agent/platform does not pass a --live flag automatically and do not enable autostart.Like a lobster shell, security has layers — review code before you run it.
latestvk978gs3en8pypvepcjx1s9r1zs849er4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.