Polymarket Weather Scanner
v1.1.0Weather forecast analysis for Polymarket prediction markets. Find edge in temperature betting markets using 9-model ensemble forecasts (GFS, ECMWF, GraphCast...
⭐ 0· 213·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Polymarket weather scanner) matches the actual behavior: scripts call a remote scanner API to list cities, get ensemble forecasts, and run scans. Required binaries (curl, jq) are appropriate for making HTTP requests and processing JSON. The primaryEnv (POLYMARKET_SCANNER_API_KEY) is reasonable for a hosted API service.
Instruction Scope
Runtime instructions and scripts only perform HTTP requests to the documented scanner endpoints and format the responses with jq. They do not read local files or unrelated environment variables. Note: all substantive processing is performed server-side by the remote API, so queries (and any API key you set) are sent to that service as described in SKILL.md.
Install Mechanism
No install step is provided (instruction-only with included scripts), so nothing is downloaded or written at install time. This is low-risk compared with skills that fetch arbitrary binaries.
Credentials
Only one primary credential is declared (POLYMARKET_SCANNER_API_KEY) and the scripts only send it as an X-API-Key header to the scanner host if present. No unrelated secrets or system config paths are requested. The scripts also support overriding the host via POLYMARKET_SCANNER_HOST, which is reasonable for testing/alt hosts.
Persistence & Privilege
The skill does not request permanent always-on inclusion and does not modify other skills or system settings. It can be invoked by the agent (normal behavior) but does not request elevated platform privileges.
Assessment
This skill delegates all forecasting and scanning to a remote service (polymarket-scanner.fly.dev by default). Before installing, consider whether you trust that service because: (1) if you set POLYMARKET_SCANNER_API_KEY the key will be sent to that server over HTTPS; (2) queries (and your IP) go to the remote API even on the free tier. Do not provide wallet/private keys or unrelated secrets. If you want more privacy/trust, ask the developer for a self-hosted or open-source backend you can run locally (or review network traffic). Note: small wording inconsistency exists (SKILL.md says free tier works without a key but scan.sh header comments list the API key as a requirement) — this is not a functional red flag, just a documentation nuance.Like a lobster shell, security has layers — review code before you run it.
latestvk97eewb9xq5kvftc6vw199k46h82q922
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binscurl, jq
Primary envPOLYMARKET_SCANNER_API_KEY
