Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Polymarket Ai Divergence

v1.0.0

Find markets where Simmer's AI consensus diverges from the real market price, then trade on the mispriced side using Kelly sizing. Scans for divergence, chec...

0· 82·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for richducat/dolph-ai-divergence.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Polymarket Ai Divergence" (richducat/dolph-ai-divergence) from ClawHub.
Skill page: https://clawhub.ai/richducat/dolph-ai-divergence
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install dolph-ai-divergence

ClawHub CLI

Package manager switcher

npx clawhub@latest install dolph-ai-divergence
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill is a Simmer/Polymarket trading bot and the code clearly requires SIMMER_API_KEY and the simmer-sdk Python package to operate — this is coherent with trading functionality. However, the top-level 'Requirements' in the provided registry metadata claimed no required env vars or credentials, which is incorrect. That metadata mismatch (manifest vs. files) is an integrity concern: the skill will actively trade on your account if provided credentials.
Instruction Scope
SKILL.md and the scripts instruct the agent to run ai_divergence.py (dry-run or --live). The runtime behavior is limited to fetching market/opportunity data, checking context/fees, computing sizes, persisting a local daily_spend.json, and calling the Simmer SDK to execute trades. The status script issues direct HTTP requests to SIMMER_API_URL. There are no instructions to read unrelated system files or exfiltrate arbitrary data, but the agent will have discretion to place real trades when run with --live.
Install Mechanism
No external download/extract install spec is present, and files reference a pip dependency (simmer-sdk) in clawhub.json. That is a normal package dependency for this purpose, not an arbitrary remote binary. Still, the package will be installed via pip (traceability recommended). There is no obfuscated code or network-hosted installers in the bundle.
!
Credentials
Functionally the skill only needs a Simmer API key (SIMMER_API_KEY) and optional envs (TRADING_VENUE, SIMMER_API_URL, AUTOMATON_MAX_BET, and several SIMMER_DIVERGENCE_* tunables). Requesting a single API key for trading is proportionate to the described capability, but the registry metadata incorrectly lists no required envs/primary credential. This mismatch could mislead users into installing without expecting to provide trading credentials.
Persistence & Privilege
The skill is not marked always:true and autostart is false. clawhub.json indicates an automaton entrypoint but it is 'managed' rather than force-enabled. The skill only writes a local daily_spend.json and does not modify other skills or system-wide configs. It does have the normal privilege of executing trades when invoked with --live, which is expected for a trading skill.
What to consider before installing
Key things to consider before installing or running: - This skill will place real trades via your Simmer account if run with --live. Provide SIMMER_API_KEY only if you intend to allow trading; consider using a restricted or test API key if available. - The top-level registry metadata is inconsistent: it claims no required env vars, but the code and clawhub.json require SIMMER_API_KEY and the simmer-sdk pip package. Treat that as a red flag and verify the package source and author identity before trusting it with funds. - Review the simmer-sdk package (pip) and the client's permissions — ensure it is the official SDK and not a trojanized fork. - Start in dry-run mode (no --live) to confirm scanner output and behavior. Use --json to inspect signals without placing trades. - Check and set conservative tunables: daily_budget, max_bet_usd, kelly_cap, and min_edge. The code enforces caps but defaults in clawhub.json and config.json vary; confirm which values your environment will use. - Consider running scripts/status.py to verify the API endpoint and that the key returns expected market data before enabling live trading. - If you do enable live trading, monitor the account closely and limit the key's privileges if the platform supports it. If you are uncomfortable with programmatic trading risk, do not supply credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a3v3qrmmf9jnbv5wg0er19d847bnj
82downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

Polymarket AI Divergence Trader

Find markets where Simmer's AI consensus diverges from the real market price, then trade the edge.

This is a template. The default logic trades when AI divergence exceeds 2% on zero-fee markets, using Kelly sizing capped at 25%. Remix it with different edge thresholds, sizing strategies, or additional filters (e.g., only trade markets resolving within 7 days). The skill handles plumbing (divergence scanning, fee checks, safeguards, execution). Your agent provides the alpha.

What It Does

  1. Scans all active markets for AI vs market price divergence
  2. Filters to markets with edge above threshold (default 2%) and zero fees
  3. Checks safeguards (flip-flop detection, existing positions)
  4. Sizes using Kelly criterion, capped conservatively
  5. Executes trades on the mispriced side (YES when AI is bullish, NO when bearish)

Quick Commands

# Scan only (dry run, no trades)
python ai_divergence.py

# Scan + execute trades
python ai_divergence.py --live

# Only show bullish divergences
python ai_divergence.py --bullish

# Only >15% divergence
python ai_divergence.py --min 15

# JSON output
python ai_divergence.py --json

# Cron mode (quiet, trades only)
python ai_divergence.py --live --quiet

# Show config
python ai_divergence.py --config

# Update config
python ai_divergence.py --set max_bet_usd=10

Configuration

KeyEnv VarDefaultDescription
min_divergenceSIMMER_DIVERGENCE_MIN5.0Min divergence % for scanner display
min_edgeSIMMER_DIVERGENCE_MIN_EDGE0.02Min divergence to trade (2%)
max_bet_usdSIMMER_DIVERGENCE_MAX_BET5.0Max bet per trade
max_trades_per_runSIMMER_DIVERGENCE_MAX_TRADES3Max trades per cycle
kelly_capSIMMER_DIVERGENCE_KELLY_CAP0.25Kelly fraction cap
daily_budgetSIMMER_DIVERGENCE_DAILY_BUDGET25.0Daily spend limit
default_directionSIMMER_DIVERGENCE_DIRECTION(both)Filter: "bullish" or "bearish"

Update via CLI: python ai_divergence.py --set max_bet_usd=10

How It Works

Divergence Signal

Each imported market has two prices:

  • AI consensus (current_probability) — Simmer's AI consensus price, derived from multi-model ensemble forecasting
  • External price (external_price_yes) — Real market price on Polymarket/Kalshi

divergence = AI consensus - external price

When divergence > 0: AI thinks the market is underpriced → buy YES When divergence < 0: AI thinks the market is overpriced → buy NO

Kelly Sizing

Position size uses the Kelly criterion:

kelly_fraction = edge / (1 - price)
position_size = kelly_fraction * max_bet_usd

Capped at kelly_cap (default 25%) to limit risk.

Fee Filtering

75% of Polymarket markets have 0% fees. The remaining 25% charge 10% (short-duration crypto/sports). This skill only trades zero-fee markets to avoid fee drag eroding the edge.

Safeguards

  • Fee check: Skips markets with any taker fee
  • Flip-flop detection: Uses SDK's context API to detect contradictory trades
  • Position check: Skips markets where you already hold a position
  • Daily budget: Stops trading when daily spend limit is reached
  • Kelly sizing: Conservative sizing prevents over-betting

API Endpoints Used

  • GET /api/sdk/markets/opportunities — Divergence-ranked market list
  • GET /api/sdk/context/{market_id} — Fee rate and safeguards per market
  • POST /api/sdk/trade — Trade execution (via SDK client)
  • GET /api/sdk/positions — Current portfolio positions

Troubleshooting

"No markets above min edge threshold" → All divergences are below the min_edge setting. Lower it with --set min_edge=0.01 or wait for larger divergences.

"Daily budget exhausted" → The skill has hit its daily spend limit. Adjust with --set daily_budget=50.

All markets skipped for fees → Only zero-fee markets are traded. If all available divergence opportunities have fees, no trades execute. This is by design.

"context fetch failed" → The SDK context endpoint is rate-limited (18 req/min). If running frequently, reduce max_trades_per_run.

Comments

Loading comments...