Polymarket Music Entertainment Trader
v1.0.3Trades Polymarket prediction markets on music streaming milestones, album chart performance, Grammy nominations, concert tour revenues, and music industry de...
⭐ 0· 222·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill is a Polymarket trading automaton for music/entertainment markets and the code and SKILL.md align with that purpose. It depends on a SimmerClient (simmer-sdk) and requires a SIMMER_API_KEY — appropriate for a service-client integration. No unrelated cloud keys or unrelated binaries are requested.
Instruction Scope
Runtime instructions and the code limit operations to market discovery, signal computation, context checks, and trades via the Simmer SDK. There are no instructions to read arbitrary user files, exfiltrate data, or call unrelated external endpoints. The SKILL.md suggests optional integrations (Spotify/Billboard) but these are explicitly marked as remix ideas, not required behavior.
Install Mechanism
This is instruction-only with a code file, and clawhub.json specifies a pip dependency on 'simmer-sdk' (reasonable for service integration). No high-risk downloads or obscure URLs are used. Note: the top-level registry metadata in the summary provided to you initially said no required env vars, but the bundled clawhub.json and SKILL.md clearly require SIMMER_API_KEY and pip install of simmer-sdk — this metadata mismatch is likely an oversight but worth noting.
Credentials
The only secret/credential required is SIMMER_API_KEY (plus tunable SIMMER_* config vars). That is proportional to a client that needs to authenticate to the Simmer trading/execution service. The skill does not request unrelated secrets (AWS keys, tokens for other services, etc.).
Persistence & Privilege
The skill does not request permanent/always-on privilege: always is false, autostart is false, and cron is null. The automaton entrypoint is declared but default behavior is paper trading and it will not autostart on install. The skill does call apply_skill_config(SKILL_SLUG) to load its own tunables, which is normal and limited to its own config.
Assessment
This skill appears to do what it says: it uses the simmer-sdk and a single SIMMER_API_KEY to paper-trade Polymarket music markets by default and will only place real trades when you explicitly run it with --live. Before installing: 1) Confirm you trust the simmer-sdk package (it will be pip installed); 2) Treat SIMMER_API_KEY like any secret—verify what permissions it grants on the Simmer platform; 3) Note the metadata inconsistency: the registry summary omitted the required SIMMER_API_KEY but clawhub.json and SKILL.md require it—this is probably a documentation issue, not a security problem; 4) If you plan to run live trades, audit the simmer-sdk or limit API key permissions and test extensively in paper mode first.Like a lobster shell, security has layers — review code before you run it.
latestvk971bxrbb79663v2batjw2r08h8467e8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.