ClawHub

Nash0 Polymarket CLI

v0.1.0

Use the Polymarket CLI (`polymarket`) to browse markets, inspect order books and prices, check public wallet data, review account state, and place or cancel...

⭐ 0· 166·0 current·0 all-time
by@itsnash0
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description match the SKILL.md: the skill is purely a usage guide for the polymarket CLI (browsing markets, reading CLOB data, and optionally trading with explicit confirmation). It does not declare unexpected credentials or unrelated binaries. Minor note: the skill expects the 'polymarket' binary to exist but the registry metadata lists no required binaries; the SKILL.md includes install hints (Homebrew) instead of a formal requires entry.
✓
Instruction Scope
Runtime instructions are narrowly scoped to running the CLI and prefer read-only commands; the file explicitly forbids reading ~/.config/polymarket/config.json and forbids running wallet-management commands without the user. There are no instructions to collect or transmit data to third-party endpoints beyond the CLI itself.
✓
Install Mechanism
There is no install spec in the registry (lowest-risk instruction-only skill). The SKILL.md suggests Homebrew install from a GitHub tap, which is a reasonable, low-risk approach. The install instructions are truncated in the included file but reference an official GitHub tap URL.
✓
Credentials
The skill requests no environment variables or credentials. It documents how the CLI sources private keys (e.g., POLYMARKET_PRIVATE_KEY and ~/.config/polymarket/config.json) and explicitly instructs the agent not to read those sources — this is proportionate. Users should still ensure the agent process has no access to private keys or env vars if they want to avoid accidental exposure.
✓
Persistence & Privilege
The skill is not always-included and allows normal autonomous invocation controls. It does not request persistent installation or modify other skills or system settings.
Assessment
This skill is an instruction-only guide for using the Polymarket CLI and appears coherent. Before installing/using it, make sure: (1) you have (or will install) the official polymarket binary from a trusted source (verify the GitHub tap URL), (2) the agent/runtime does not have access to your private key environment variables or ~/.config/polymarket/config.json (the CLI can read those if present), and (3) you require explicit confirmation before any trading, wallet-management, approval, or on-chain write commands — the skill documents those safeguards but the platform/agent must enforce them. If you want the agent to run commands, consider restricting the agent’s filesystem and environment so secrets cannot be accidentally read.

Like a lobster shell, security has layers — review code before you run it.

latestvk977w966t3xmnbaht1myhm282n82tbqt

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments