Polymarket Geopolitics Trader
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: polymarket-geopolitics-trader Version: 0.0.3 The polymarket-geopolitics-trader skill is a legitimate automated trading tool designed for prediction markets. It implements a transparent strategy based on geopolitical event types and regional news cycles using the simmer-sdk. The code in trader.py follows standard practices for the platform, including safety defaults (paper trading by default) and configurable risk parameters via clawhub.json. No indicators of malicious intent, data exfiltration, or unauthorized access were identified.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may believe the bot will avoid lower-liquidity, wider-spread, near-resolution, or higher-count positions when the actual defaults allow them.
The user-facing safety table describes more conservative defaults than the provided code/config: trader.py and clawhub.json default to MIN_VOLUME 1000, MAX_SPREAD 0.12, MIN_DAYS 0, and MAX_POSITIONS 8. For a financial trading bot, overstating these safeguards can materially change user expectations.
`SIMMER_MIN_VOLUME` | `20000`; `SIMMER_MAX_SPREAD` | `0.08`; `SIMMER_MIN_DAYS` | `5`; `SIMMER_MAX_POSITIONS` | `6`
Align SKILL.md, trader.py, and clawhub.json defaults before live use, and manually verify all tunables in the Simmer UI.
If enabled in live mode, the agent may commit real USDC according to automated strategy logic and the actual configured limits.
When live mode is enabled, the skill switches from paper trading to a real Polymarket venue using the SIMMER_API_KEY. The visible artifacts show a live-mode gate and tunables, but not a per-trade confirmation mechanism, and the documented safety limits conflict with actual defaults.
venue = "polymarket" if live else "sim" ... api_key=os.environ["SIMMER_API_KEY"] ... if live: _client.live = True
Keep the skill in paper mode until reviewed, require explicit approval for live runs or individual trades, and set conservative caps before providing a trading key.
Anyone or any code with this key may be able to perform trading actions through the configured Simmer/Polymarket integration.
The credential requirement is disclosed and purpose-aligned, but it grants trading authority and should be treated as sensitive. The registry summary also under-declares this by listing no required env vars or primary credential.
`SIMMER_API_KEY` | Yes | Trading authority. Treat as high-value credential.
Use the least-privileged key available, avoid sharing it with unrelated skills, monitor account activity, and revoke or rotate it if no longer needed.
Future or unexpected dependency versions could change trading behavior or credential handling.
The required Python dependency is unpinned. This is expected for a Simmer trading integration, but package provenance and version changes affect a skill that handles financial trading credentials.
"pip": [ "simmer-sdk" ]
Pin a reviewed simmer-sdk version and verify the package source before enabling live trading.