Poly Tradebot
v1.0.4Automated news analysis pipeline that fetches CNBC world news, classifies articles by topic (geopolitics vs macroeconomics), and invokes specialized skills (...
⭐ 0· 121·0 current·0 all-time
byRafi Mochamad Fahreza@rafimchmd
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (CNBC → classify → invoke expert skills → find Polymarket markets → build trading table) align with the SKILL.md and included references. No unrelated environment variables, binaries, or config paths are requested.
Instruction Scope
Instructions explicitly use web_fetch, web_search, and to invoke geopolitics-expert / the-fed-agent and to save outputs to memory/. That scope is consistent with the stated purpose. Minor issues: the shipped Python script does not perform network fetches (it prints orchestration steps rather than executing them), and it uses the identifier the_fed_agent in a comment while SKILL.md uses the-fed-agent; the script can also return 'uncertain' but the SKILL.md does not describe handling for that case. These are functional/clarity issues rather than evidence of malicious scope creep.
Install Mechanism
Instruction-only skill with no install spec. The included Python file is small and non-executing (it prints orchestration steps). No downloads, installers, or archive extraction are present.
Credentials
Skill requests no environment variables or credentials. It relies on platform tools (web_fetch, web_search) and other skills; requiring those external skills is proportionate to the pipeline purpose but users should confirm those skills' privileges separately.
Persistence & Privilege
always is false and the skill is user-invocable; it does instruct saving files to memory/ (expected for a pipeline). No modifications to other skills or system-wide settings are requested.
Assessment
This skill is internally coherent for automating news→Polymarket analysis, but check a few things before enabling it in production: (1) The included scripts are orchestration helpers only — they do not actually fetch CNBC or Polymarket data; the runtime relies on platform tools (web_fetch, web_search) and the external skills geopolitics-expert and the-fed-agent. Ensure those skills exist and are trusted. (2) There are small inconsistencies: the Python file references the_fed_agent while SKILL.md uses the-fed-agent, and the script can classify an article as 'uncertain' even though the pipeline assumes a geopolitics or macro classification — ask the author to clarify failure paths. (3) The skill will produce trading recommendations and searches markets; if you plan to act on those recommendations, treat them as high-risk financial advice and test in a sandbox. (4) Confirm you are comfortable with the agent autonomously invoking external skills and web tools (this is platform-default behavior). If you need higher assurance, request the author add explicit error handling, make network calls explicit in code (with reviewable HTTP targets), and document which external skills are required and what privileges they have.Like a lobster shell, security has layers — review code before you run it.
latestvk9758h411ehyg6hrz088vx84ns8359x6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.