Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Polymarket Twitter Cadence Model Trader

v0.0.3

Trades post-count bin markets using a Poisson statistical model to predict the most likely bins based on historical posting rates. Requires SIMMER_API_KEY an...

0· 133·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for diagnostikon/polymarket-twitter-cadence-model-trader.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Polymarket Twitter Cadence Model Trader" (diagnostikon/polymarket-twitter-cadence-model-trader) from ClawHub.
Skill page: https://clawhub.ai/diagnostikon/polymarket-twitter-cadence-model-trader
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install polymarket-twitter-cadence-model-trader

ClawHub CLI

Package manager switcher

npx clawhub@latest install polymarket-twitter-cadence-model-trader
Security Scan
Capability signals
CryptoRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill is a Polymarket/Simmer trading bot that uses a Poisson model and the Simmer SDK; requiring a SIMMER_API_KEY and the simmer-sdk package is coherent with that purpose. However the registry summary at the top of the submission claimed "Required env vars: none" while both clawhub.json and SKILL.md declare SIMMER_API_KEY as required — an inconsistency in metadata (likely sloppy publishing) that you should confirm before trusting the package.
Instruction Scope
SKILL.md instructs agent to install simmer-sdk, set SIMMER_API_KEY, run trader.py, and explicitly defaults to paper trading unless --live is provided. The runtime instructions and included trader.py are narrowly scoped to market discovery, modeling, and trading via the SimmerClient. There are no instructions to read unrelated system files or exfiltrate data.
Install Mechanism
There is no custom installer; the dependency is a PyPI package (simmer-sdk). Using a PyPI dependency is expected for this use case but is a moderate-risk vector: review the simmer-sdk package/source before providing credentials. The SKILL.md and clawhub.json both point to a GitHub repo which you should audit; no arbitrary download URLs or extract steps are present.
Credentials
The skill only requests a trading API key (SIMMER_API_KEY) plus SIMMER_ prefixed tunables for risk parameters — these are proportional to a trading bot. Important caveat: a live-capable API key grants trading authority; SKILL.md warns about not placing a live key where automated code can call --live, which is appropriate. Verify which key scopes are required by simmer-sdk before supplying a high-privilege key.
Persistence & Privilege
always:false, autostart:false, and the automaton is managed with entrypoint trader.py. The skill does not demand forced permanent inclusion. Autonomous invocation is allowed (platform default) but the skill defaults to paper trading; that combination is reasonable for a trader skill.
Scan Findings in Context
[pre-scan-injection-none] expected: The pre-scan reported no injection signals. The absence of regex matches is not proof of safety, but given the code and SKILL.md the lack of scanner hits is expected — the code uses the Simmer SDK and environment vars rather than suspicious obfuscated patterns.
What to consider before installing
This skill appears to do what it says: analytic pricing and automated trading via the Simmer SDK. However: 1) Confirm the metadata mismatch — the registry header said no env vars but clawhub.json and SKILL.md require SIMMER_API_KEY; treat that as a publishing error and verify the canonical source. 2) Audit the simmer-sdk package and the GitHub repo referenced in SKILL.md before providing credentials (PyPI packages can contain arbitrary code). 3) Start in paper mode only (default) and test behavior thoroughly; do not put a live-capable SIMMER_API_KEY in an environment where automation could call trader.py --live. 4) If you plan to let agents invoke this autonomously, consider limiting the API key scopes (if supported) and using least-privilege credentials or a staging account. 5) If you are uncomfortable with provenance (owner ID unknown, no homepage in the registry header), seek a well-known/reputable alternative or request source verification from the publisher.

Like a lobster shell, security has layers — review code before you run it.

latestvk97d53hwmkkyd7qnm7hm32arfx85pp6q
133downloads
0stars
5versions
Updated 1h ago
v0.0.3
MIT-0

Twitter Cadence Model Trader

This is a template.
The default signal is a Poisson model based on historical posting rates — remix it with Twitter/X API v2 real-time post counts, time-of-day distributions, or NLP topic-burst detection.
The skill handles all the plumbing (market discovery, trade execution, safeguards). Your agent provides the alpha.

Strategy Overview

Post-count bin markets (e.g., "Will Elon Musk post 190-214 tweets from March 30 to April 1?") are perfect for statistical modeling because the number of posts in a time interval follows a Poisson distribution.

Retail traders price these bins by gut feeling. This skill prices them with math.

Signal Logic

Poisson Model

  1. Parse the person, bin range, and time period from the market question
  2. Compute lambda = person's historical daily rate x period days
  3. Calculate P(bin) = sum of Poisson PMF from bin_lower to bin_upper
  4. Compare model probability to market price
  5. Trade when model diverges from market AND price is in threshold band

Person Baselines

PersonDaily RatePlatform
Elon Musk~65 tweets/dayX/Twitter
Donald Trump~23 posts/dayTruth Social
Vitalik Buterin~8 posts/dayX/Twitter
CZ~12 posts/dayX/Twitter

Model Bias

The Poisson model acts as a conviction multiplier:

  • If model says bin is 2x more likely than market → 2x conviction boost
  • If model says bin is 0.5x less likely → signal vetoed (don't trade against math)

Remix Ideas

  • Twitter API v2: Replace baseline daily_rate with real-time 7-day rolling average
  • Time-of-day model: Elon posts 60% of tweets between 6PM-2AM Pacific — use hourly Poisson
  • Negative binomial: Better than Poisson for overdispersed counts (bursty posters)
  • Topic burst NLP: Detect thread-mode (3x rate) vs normal mode

Risk Parameters

ParameterDefaultNotes
Max position size$40 USDCPer market
Min market volume$1,000Standard filter
Max bid-ask spread10%Default threshold
Min days to resolution0Post-count markets are short-lived
Max open positions8Diversify across bins

Installation & Setup

clawhub install polymarket-twitter-cadence-model-trader

Requires: SIMMER_API_KEY environment variable.

Cron Schedule

Cron is set to null — the skill does not run on a schedule until you configure it in the Simmer UI.

Safety & Execution Mode

The skill defaults to paper trading (venue="sim"). Real trades only execute when --live is passed explicitly.

ScenarioModeFinancial risk
python trader.pyPaper (sim)None
Cron / automatonPaper (sim)None
python trader.py --liveLive (polymarket)Real USDC

The automaton cron is set to null — it does not run on a schedule until you configure it in the Simmer UI. autostart: false means it won't start automatically on install.

Required Credentials

VariableRequiredNotes
SIMMER_API_KEYYesTrading authority — keep this credential private. Do not place a live-capable key in any environment where automated code could call --live.

Tunables (Risk Parameters)

All risk parameters are declared in clawhub.json as tunables and adjustable from the Simmer UI without code changes. They use SIMMER_-prefixed env vars so apply_skill_config() can load them securely.

VariableDefaultPurpose
SIMMER_MAX_POSITION40Max USDC per trade (reached at 100% conviction)
SIMMER_MIN_VOLUME1000Min market volume filter (USD)
SIMMER_MAX_SPREAD0.10Max bid-ask spread (0.10 = 10%)
SIMMER_MIN_DAYS0Min days until market resolves
SIMMER_MAX_POSITIONS8Max concurrent open positions
SIMMER_YES_THRESHOLD0.38Buy YES if market price ≤ this value
SIMMER_NO_THRESHOLD0.62Sell NO if market price ≥ this value
SIMMER_MIN_TRADE5Floor for any trade (min USDC regardless of conviction)

Dependency

simmer-sdk is published on PyPI by Simmer Markets.

Review the source before providing live credentials if you require full auditability.

Comments

Loading comments...