Polymarketodds 1.0.0
v1.0.0Query Polymarket prediction markets - check odds, trending markets, search events, track prices and momentum. Includes watchlist alerts, resolution calendar,...
⭐ 0· 635·11 current·11 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match behavior: the code and SKILL.md implement market queries, trending/movers, watchlist/alerts, calendar, and a local paper-trading portfolio. Required binary (python3) and use of Polymarket's public API are appropriate for this purpose.
Instruction Scope
SKILL.md instructs the agent/user to run the included Python script with various subcommands. The instructions operate by making HTTPS GET requests to gamma-api.polymarket.com and reading/writing local files in ~/.polymarket. There is no instruction to read unrelated system files or exfiltrate data.
Install Mechanism
No install spec is provided (instruction-only), which is low-risk. The script header documents a dependency on the Python 'requests' package but SKILL.md/registry metadata do not provide an installation step; users should ensure 'requests' is available in the environment (pip install requests) before running.
Credentials
No environment variables, credentials, or external secrets are requested. All persistent data (watchlist.json, portfolio.json) is stored under ~/.polymarket as documented; this is proportional to the stated features.
Persistence & Privilege
The skill does not request always: true and disable-model-invocation is set to true (cannot be invoked autonomously). It only creates/uses its own data directory (~/.polymarket) and does not modify other skills or system-wide configs.
Assessment
This skill appears coherent and implements the advertised functionality using Polymarket's public Gamma API and local JSON files. Before installing: 1) Confirm your environment has Python 3.10+ and the 'requests' package (pip install requests) or the script may fail. 2) Review the full script for any notification/webhook code or outbound POSTs (search for requests.post, subprocess, socket, or remote URLs) if you want to be extra cautious—SKILL.md claims it only performs GETs to the public API. 3) Be aware it will create ~/.polymarket and store watchlist/portfolio data there; if you run cron jobs, ensure the scheduled commands point to the intended script path. 4) Run the script as an unprivileged user (no sudo) and inspect its output in a controlled environment if you have high security requirements.Like a lobster shell, security has layers — review code before you run it.
latestvk97efv6nbqdh98tzxq5nvr03d181qafw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📊 Clawdis
Binspython3