Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Polymarket Market Importer

v1.0.0

Auto-discover and import Polymarket markets matching your keywords, tags, and volume criteria. Runs on a schedule so you never miss a new market worth tradin...

0· 83·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for richducat/dolph-market-importer.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Polymarket Market Importer" (richducat/dolph-market-importer) from ClawHub.
Skill page: https://clawhub.ai/richducat/dolph-market-importer
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install dolph-market-importer

ClawHub CLI

Package manager switcher

npx clawhub@latest install dolph-market-importer
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The code and SKILL.md clearly implement a Simmer-backed Polymarket importer and require SIMMER_API_KEY — that is coherent with the stated purpose. However the registry summary at the top of the evaluation indicated "Required env vars: none," while clawhub.json, SKILL.md, and market_importer.py all require SIMMER_API_KEY. Also the ownerId and version fields differ between the provided registry metadata and _meta.json/clawhub.json, which suggests packaging/metadata drift (repackaging or stale registry entry).
Instruction Scope
Runtime instructions (install simmer-sdk, set SIMMER_API_KEY, configure filters, run in dry-run then --live) match the code's behavior. The code only calls the simmer-sdk client methods (list_importable_markets, import_market), filters results, and persists seen market IDs. It does read an optional TRADING_VENUE env var and writes imported_markets.json in the skill directory — both are consistent with the importer purpose.
Install Mechanism
Installation is via pip (simmer-sdk) which is standard and expected. There is no download-from-URL or archive extraction in the package. The skill is instruction/code based with no additional installer, which is low-to-moderate risk and consistent with the declared dependency.
Credentials
The only secret needed is SIMMER_API_KEY, which is appropriate for a tool that interacts with the Simmer API. The concern is not the credential itself but the inconsistency between metadata listings (one place claims no required env vars while the code requires the API key). Confirm which metadata is authoritative before handing over a key.
Persistence & Privilege
The skill is not always-included and does not request elevated platform privileges. It persists a local file (imported_markets.json) for deduplication and config via simmer-sdk; it does not modify other skills or global agent settings. Cron scheduling is declared in clawhub.json (0 */6 * * *) but autostart is false.
What to consider before installing
This skill appears to implement the advertised importer and only needs your Simmer API key, but there are mismatches in the package metadata (required env vars, ownerId, and version). Before running with --live: 1) verify the publisher/owner and that clawhub.json/_meta.json match the repository you trust; 2) inspect simmer-sdk (the pip package) to confirm it is the official SDK you expect; 3) run a dry run (python market_importer.py) and review imported_markets.json location and contents; 4) store SIMMER_API_KEY in a safe place (not in plaintext cron jobs) and avoid passing it to untrusted copies of this skill; 5) only enable scheduled runs after you confirm the skill is from a trusted source and its metadata is consistent.

Like a lobster shell, security has layers — review code before you run it.

latestvk9760xerpjjt1j070ehc84ekk5847nq9
83downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

🎯 Polymarket Market Importer

This is a template. The keywords, categories, and volume filters are yours to set. The skill handles the hunting — searching Polymarket on a schedule, filtering by your criteria, skipping what you've already seen, and importing the rest into Simmer. You configure the net, it catches the fish.

Setup

  1. Install the SDK:

    pip install simmer-sdk
    
  2. Set your API key:

    export SIMMER_API_KEY="sk_live_..."
    
  3. Set your filters:

    python market_importer.py --set keywords=bitcoin,ethereum,solana
    python market_importer.py --set min_volume=25000
    
  4. Dry run to verify:

    python market_importer.py
    
  5. Go live:

    python market_importer.py --live
    

Configuration

ParameterEnv VarDefaultDescription
keywordsIMPORTER_KEYWORDSbitcoin,ethereumComma-separated search terms
min_volumeIMPORTER_MIN_VOLUME10000Minimum 24h volume — filters out thin markets
max_per_runIMPORTER_MAX_PER_RUN5Cap on imports per execution
categoriesIMPORTER_CATEGORIEScryptoComma-separated category filters (crypto, politics, sports, etc.)

Quick Commands

# Dry run — preview what would be imported
python market_importer.py

# Import for real
python market_importer.py --live

# Check what you've already imported
python market_importer.py --positions

# Show current config
python market_importer.py --config

# Update a setting
python market_importer.py --set keywords=bitcoin,ethereum,xrp

# Quiet mode — only output on imports or errors
python market_importer.py --live --quiet

Example Output

🎯 Polymarket Market Importer
==================================================

  [LIVE MODE] Importing markets for real.

  Config: keywords=bitcoin,ethereum | min_volume=10000 | max_per_run=5 | categories=crypto

  Searching for: bitcoin
    Found 12 importable markets
    3 already imported, 9 new
    Category match: 7

  Searching for: ethereum
    Found 8 importable markets
    2 already imported, 6 new
    Category match: 5

  Importing: "Will BTC exceed $150k by July 2026?" (vol: $125,000)
    ✅ Imported successfully
  Importing: "Will ETH reach $5k by June 2026?" (vol: $89,000)
    ✅ Imported successfully

  Summary: 20 found | 5 already seen | 2 imported (max 5)

Troubleshooting

ProblemFix
"No importable markets found"Broaden your keywords or lower min_volume
"Import failed"Daily quota may be hit (10/day free, 50/day Pro). Try next run.
"SIMMER_API_KEY not set"Get your key from simmer.markets/dashboard → SDK tab
Markets not matching categoriesCategory filter checks question text and tags. Try different terms.

Schedule

Runs every 6 hours via cron (0 */6 * * *). Adjust in clawhub.json if needed.

Comments

Loading comments...