Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Polymarket News Events

v2.0.3

Monitors 20+ premium RSS feeds for breaking news and matches stories to Polymarket markets via keyword analysis. Trades when breaking news creates an estimat...

0· 107·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for mibayy/news-events.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Polymarket News Events" (mibayy/news-events) from ClawHub.
Skill page: https://clawhub.ai/mibayy/news-events
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install news-events

ClawHub CLI

Package manager switcher

npx clawhub@latest install news-events
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description, SKILL.md, and the included Python file all describe the same capability: monitoring RSS feeds and trading via a Simmer/Polymarket client. The declared pip dependencies and the use of SIMMER_API_KEY in code are appropriate for that purpose.
Instruction Scope
SKILL.md instructs running news_events.py (dry-run by default; --live to execute real trades). The runtime instructions and the code align: the script polls feeds, filters stories, matches markets, estimates impact, and (when live) places trades. No instructions attempt to read unrelated system secrets or external endpoints beyond news feeds and the trading API. Note: the skill writes a state file to /tmp/polymarket_news_seen.json to track seen stories.
Install Mechanism
There is no install spec (instruction-only), so nothing is automatically downloaded or extracted. The manifest lists pip dependencies (simmer-sdk, requests, feedparser) which are reasonable and expected for this functionality. Installing those packages is normal but still executes third-party code on your system.
!
Credentials
The SKILL.md requires SIMMER_API_KEY which is consistent with the code. However, clawhub.json lists both SIMMER_API_KEY and TRADING_VENUE in requires.env even though the code treats TRADING_VENUE as optional (os.environ.get with default). The registry metadata also does not mark a primary credential, while the skill clearly needs an API key. This mismatch is an incoherence to be aware of. Asking for a trading API key is proportionate to the purpose, but that key is sensitive (gives trading capability) and should be scoped/limited if possible.
!
Persistence & Privilege
The manifest includes a cron schedule (*/3 * * * *) which implies periodic autonomous runs every 3 minutes. While always:false, this frequent scheduled execution combined with the ability to execute real trades (via --live) increases operational risk—especially if configuration or flags could be changed to enable live trading unattended. The skill is not requesting platform-wide privileges, but periodic autonomous trading increases potential for monetary loss if misconfigured or compromised.
What to consider before installing
This package appears to be a coherent news-driven trading bot, but treat it as high-risk until you verify details. Before installing or running: 1) Inspect the full news_events.py (the included file is present) to confirm there is no hidden network exfiltration or unexpected endpoints beyond typical RSS feeds and the simmer client. 2) Do not supply a production SIMMER_API_KEY until you've run dry-runs and reviewed behavior; if possible use an API key with limited permissions/funds. 3) Note the manifest's cron: the skill may be scheduled to run every 3 minutes — ensure it will not be started in live mode automatically. 4) Address the manifest inconsistencies (TRADING_VENUE listed as required while code treats it as optional; no primary credential set) or ask the author to fix them. 5) If you plan to run live trading, run inside a controlled environment, monitor trades closely, and rotate/revoke keys after testing. If you are not comfortable auditing the code yourself, do not provide real trading credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f9cyqj7jd9nm6nygs2vryxs83bv23
107downloads
0stars
2versions
Updated 1mo ago
v2.0.3
MIT-0

Breaking News Event Trader

Comprehensive breaking news monitor that trades Polymarket markets on high-impact events.

What It Does

Continuously polls 20+ premium news RSS feeds, pre-filters stories with fast keyword matching, then matches relevant stories to active Polymarket markets. When a breaking story has estimated price impact >12%, generates a trade signal.

News Sources

CategorySources
Wire ServicesReuters, AP
BroadcastBBC, CNBC
FinancialBloomberg, FT, MarketWatch, WSJ
PoliticsPolitico, Axios, The Hill
CryptoCoinDesk, CoinTelegraph
TechTechCrunch

Pre-Filter System

Two-stage filtering for speed:

  1. Fast reject — Skip stories with common noise keywords (opinion, podcast, review)
  2. Fast accept — Prioritize stories with high-signal keywords (breaking, passes, signs, ruling, indicted, default, crash, surge)

Only stories passing pre-filter get matched against Polymarket markets.

Impact Estimation

Stories are scored on:

  • Source credibility tier (wire services > financial > blogs)
  • Keyword signal strength
  • Headline match quality to market question
  • Recency (exponential decay over 30 minutes)

Requirements

pip dependencies: simmer-sdk, requests, feedparser

Environment variables:

  • SIMMER_API_KEY (required) - get from simmer.markets/dashboard

⚠️ Automated trading. Dry-run is the default. Pass --live to execute real trades. Review all configuration before enabling live mode.

Usage

python news_events.py                  # dry run
python news_events.py --live           # real trades
python news_events.py --live --quiet   # cron mode

🧪 Remixable Template — Fork this skill to add your own RSS sources, tune impact thresholds, add sentiment analysis, or integrate with a news API for faster delivery than RSS.

Comments

Loading comments...