ClawHub

Hourly Momentum Trader

v1.0.0

Momentum-based trading agent for hourly crypto candles. Uses RSI, MACD, OBV, EMA, and Bollinger Band confluence to score directional momentum from -10 to +10...

⭐ 1· 527·2 current·2 all-time
by@jamierossouw
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
ℹ
Purpose & Capability
The name/description (hourly momentum trader for Polymarket) matches the instructions and scoring system. However, the doc references Polymarket market prices (polymarket_up_price) and a USDC.e wallet balance check as part of trade rules while the skill declares no required credentials or data sources — this is a functional gap (not necessarily malicious) that makes the operational requirements unclear.
ℹ
Instruction Scope
SKILL.md stays within trading-related scope (indicators, scoring, betting rules). It references runtime variables (e.g., polymarket_up_price, polymarket market freshness, USDC.e balance) but does not instruct how to fetch these values, where to call Polymarket APIs, or how to access a wallet. The instructions do not ask to read unrelated files/paths or exfiltrate data.
✓
Install Mechanism
Instruction-only skill with no install steps, no downloads, and no code files — lowest install risk. Nothing is written to disk by the skill itself.
ℹ
Credentials
The skill declares no required environment variables or credentials despite implying live-market and wallet access. For live betting or balance checks, callers will need Polymarket data access and a wallet provider/private key; the SKILL.md neither requests nor documents these, creating a proportionality/clarity gap.
✓
Persistence & Privilege
always is false and user-invocable is true (defaults). The skill does not request persistent system-wide privileges or modify other skills/configs. Autonomous invocation is allowed by default but not a special privilege here.
What to consider before installing
This skill is an instruction-only trading strategy (no code or installs). It appears to describe a legitimate momentum-scoring method, but it assumes access to Polymarket prices and a wallet balance without explaining how to provide them. Before using: (1) don't hand over private keys to an untrusted skill — implement trading/execution in a separate, secured service or use paper trading; (2) confirm how your agent will obtain Polymarket market prices (public API, scraping, or injected context) and ensure any API keys are stored securely; (3) test the logic offline with historical data and paper trades; (4) be aware the skill issues recommendations, not guaranteed profitable trades — financial risk is separate from security risk. If you plan to automate bets, require a clear secure integration (separate execution component, least-privilege API tokens or an execution bot you control).

Like a lobster shell, security has layers — review code before you run it.

latestvk9716ke29sv0tcrw8ge4x9b71d81jp5z

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments