Polymarket Real Estate Trader

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: polymarket-real-estate-trader Version: 0.0.3 The skill is a legitimate trading bot designed for Polymarket prediction markets related to real estate and Federal Reserve decisions. It utilizes the 'simmer-sdk' for market interaction and implements a transparent strategy based on FOMC calendars and market volatility. Security-wise, it follows best practices by defaulting to a paper-trading mode ('sim') and requiring an explicit '--live' flag for real financial transactions. No indicators of data exfiltration, malicious code execution, or prompt injection were found in trader.py or SKILL.md.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If live mode is enabled, the skill can spend real USDC according to its strategy and risk settings.

Why it was flagged

The skill can place real-money trades when live mode is explicitly used. This is purpose-aligned and disclosed, but financially high impact.

Skill content
`python trader.py --live` | Live (polymarket) | Real USDC
Recommendation

Use paper mode first, keep position limits low, and only enable `--live` after explicitly deciding you want real trades.

What this means

Anyone with this key may be able to act through the linked trading account or Simmer configuration.

Why it was flagged

The skill requires a credential that authorizes trading activity. This matches the purpose and no leakage is shown, but the credential is sensitive.

Skill content
`SIMMER_API_KEY` | Yes | Trading authority. Treat as high-value credential.
Recommendation

Use the least-privileged key available, store it only in the intended environment, monitor activity, and rotate it if exposed.

What this means

A changed or compromised dependency could affect market discovery, trade execution, or credential handling.

Why it was flagged

The required SDK dependency is not version-pinned. It is expected for this trading integration, but future package changes could affect behavior.

Skill content
"pip": ["simmer-sdk"]
Recommendation

Pin and verify the dependency version before live use, and prefer a reviewed lockfile or trusted runtime image.

What this means

A user may overestimate which trading thresholds are directly adjustable through the UI.

Why it was flagged

The SKILL.md table lists parameters such as `SIMMER_YES_THRESHOLD`, `SIMMER_NO_THRESHOLD`, and `SIMMER_MIN_TRADE`, but the provided clawhub.json tunables list does not include those entries.

Skill content
All declared as `tunables` in `clawhub.json` and adjustable from the Simmer UI.
Recommendation

Verify the actual UI-exposed settings before live trading, and set any missing parameters through the supported environment/configuration mechanism if needed.