Polymarket Fast Loop Improved
WarnAudited by ClawScan on May 10, 2026.
Overview
This is a clearly described trading bot, but it asks for a trading API key and encourages unattended live trading using a script that is not included for review.
Treat this as a high-risk financial automation. Install only if you can obtain and review the missing runtime code, keep it in paper mode first, use a low-privilege/low-balance trading key, set strict budgets, and avoid enabling live cron trading until you are prepared to monitor and stop it.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If run live, the skill could place repeated trades and lose money due to a bad signal, bug, or misconfiguration.
The skill documents real-money live trading and an unattended cron loop. That is purpose-aligned, but it is a high-impact financial action with no artifact-backed per-trade approval or reviewed enforcement of limits.
# Go live python fastloop_improved.py --live ... */5 * * * * cd /path/to/skill && python fastloop_improved.py --live --quiet
Do not run --live or cron until you have reviewed the actual code, tested paper mode extensively, set hard spend limits, and confirmed you can stop the job quickly.
You would be trusting unreviewed or absent code to handle a trading credential and make financial decisions.
The skill declares a runnable entrypoint and dependency, while the provided artifact set says there are no code files. For a live trading bot, that missing runtime creates a material provenance and review gap.
"requires":{"env":["SIMMER_API_KEY"],"pip":["simmer-sdk"]},"automaton":{"managed":true,"entrypoint":"fastloop_improved.py"}Require the full source package, dependency version pinning, and reviewable trading/risk-limit code before installing or running it.
Anyone or any process with this key may be able to access or trade through the associated Simmer/market account, depending on the key permissions.
A trading API key is expected for this purpose, and no leakage is shown, but it is still a sensitive credential that may authorize account actions.
Required env vars: SIMMER_API_KEY
Use the least-privileged key available, prefer a separate low-balance account, monitor usage, and revoke the key if you stop using the skill.
The bot may keep running and placing live trades until the cron job is removed or disabled.
The scheduled execution is disclosed and user-configured, but it creates a persistent autonomous trading loop that can continue after setup.
openclaw cron add ... --cron "*/5 * * * *" ... --message "Run improved fast loop: cd /path/to/skill && python fastloop_improved.py --live --quiet."
Only add the cron job deliberately, set monitoring/alerts, and document how to disable it before enabling live mode.
The local ledger may reveal financial activity, strategy, positions, or performance if the skill directory is shared or exposed.
The ledger is purpose-aligned for calibration, but it stores local trading history and performance data.
The skill tracks every paper and live trade in `fastloop_ledger.json`.
Keep the ledger private, avoid committing it to shared repositories, and delete or archive it securely when no longer needed.