Polymarket Crypto Onchain Trader
ReviewAudited by ClawScan on May 10, 2026.
Overview
This appears to be a purpose-aligned Polymarket trading bot that defaults to paper trading, but it uses a Simmer API key and can place real trades if live mode is enabled.
Install only if you intend to connect a Simmer/Polymarket trading account. Keep the default paper mode until you understand the strategy, review the max position and max open position settings, use a revocable API key, and enable live trading only when you are prepared for real financial losses.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If live mode is enabled, the skill may place real prediction-market trades using the configured strategy and limits.
The same trading code can switch from simulated trading to the real Polymarket venue when live mode is enabled. This is expected for the skill, but it is high-impact financial action.
venue = "polymarket" if live else "sim"
Use paper mode first, enable --live only intentionally, and review position limits, thresholds, and approval expectations before live use.
A configured API key may allow the skill to access the user's Simmer/Polymarket trading account capabilities.
The skill requires a Simmer API key to create the client. That credential is purpose-aligned for trading, but sensitive, and the registry requirements summary lists no required env vars or primary credential.
api_key=os.environ["SIMMER_API_KEY"],
Use a revocable, least-privilege API key where possible, keep trading/spend limits low, and revoke the key if you stop using the skill.
A future or compromised dependency version could affect trading behavior or credential handling.
The skill depends on an external Python package without a version pin. This is expected for the integration, but the dependency runs in the same environment as the trading credential.
"pip": [
"simmer-sdk"
]Prefer a pinned and reviewed simmer-sdk version or install only from a trusted package source.
Users might underestimate that the skill still needs provider API access and a credential to operate.
This wording could be read as no API or network use, while the manifest and code require Simmer SDK/API access for market discovery and trade execution. It likely refers to the alpha signal data, but the distinction should be clear.
no external API required
Clarify that no external market-data API is required for the signal, but Simmer/Polymarket API access is still used for discovery and trading.