ClawHub

Polymarket News Events

v2.0.2

Monitors 20+ premium RSS feeds for breaking news and matches stories to Polymarket markets via keyword analysis. Trades when breaking news creates an estimat...

⭐ 0· 125·0 current·0 all-time
by@mibayy
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description claim a news-driven trading bot. The code imports simmer_sdk and constructs a SimmerClient using SIMMER_API_KEY; it polls RSS feeds and estimates impact before generating trades. Required packages and APIs align with that purpose.
ℹ
Instruction Scope
SKILL.md and news_events.py are consistent: fetch RSS feeds, pre-filter, estimate impact, and (optionally) place trades. The skill explicitly warns that dry-run is default and requires --live to execute real trades. There are no instructions to read unrelated system files or exfiltrate data outside the news feeds and the Simmer API, but the code writes a state file to /tmp to avoid duplicate trading.
ℹ
Install Mechanism
No external download/extract install is present. The manifest (clawhub.json) lists pip dependencies (simmer-sdk, requests, feedparser) which match SKILL.md. There is no high-risk install URL; installing the listed Python packages from PyPI is standard for this use-case.
✓
Credentials
The skill requires an API key for the trading SDK (SIMMER_API_KEY), which is appropriate. The manifest also lists TRADING_VENUE; the code uses this as an optional env var with a default, so the extra env var is minor and consistent with multi-venue support. No other unrelated secrets or system credentials are requested.
✓
Persistence & Privilege
always is false and model invocation is allowed (platform default). The manifest includes a cron schedule (every 3 minutes) which means it is intended to run periodically; this is consistent with a live monitoring/trading automaton. The skill only writes a local /tmp state file and does not modify other skills or system-wide configs.
Scan Findings in Context
[requires.pip] expected: clawhub.json and SKILL.md both list 'simmer-sdk', 'requests', and 'feedparser'—these are expected for fetching RSS feeds and interacting with the Simmer trading API.
[requires.env.TRADING_VENUE] expected: clawhub.json declares TRADING_VENUE. The code reads TRADING_VENUE with a default value, so the presence of this env var is reasonable though SKILL.md only called out SIMMER_API_KEY.
[cron.schedule] expected: clawhub.json sets a cron of '*/3 * * * *' (every 3 minutes), which aligns with continuous news monitoring but is important for the user to notice because it means frequent automated runs.
Assessment
This skill appears to do what it says: it polls many RSS feeds, estimates impact, and can place trades via the Simmer API. Before enabling live trading: 1) Keep SIMMER_API_KEY secret and consider using a limited-permission API key or demo account if available; 2) Test extensively in dry-run mode and review the code (especially the trade-placement logic) to confirm thresholds and sizing; 3) Be aware the manifest schedules runs every 3 minutes—if you don't want automatic polling, remove or change the cron; 4) Run it in an isolated environment (dedicated container or VM) and monitor network activity; 5) If you need stronger assurance, ask for the remainder of the source (the truncated portion) so you can inspect the exact trade-execution calls and any error/exception handling.

Like a lobster shell, security has layers — review code before you run it.

latestvk971gjyvawqv65nwe99ca1myf1838pq7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments