Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Polymarket Onlyfans Trader

v0.0.2

Trades Polymarket markets on OnlyFans using three structural edges — celebrity pipeline base-rate mispricing (retail ignores demographic base rates for who j...

0· 159·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for diagnostikon/polymarket-onlyfans-trader.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Polymarket Onlyfans Trader" (diagnostikon/polymarket-onlyfans-trader) from ClawHub.
Skill page: https://clawhub.ai/diagnostikon/polymarket-onlyfans-trader
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install polymarket-onlyfans-trader

ClawHub CLI

Package manager switcher

npx clawhub@latest install polymarket-onlyfans-trader
Security Scan
Capability signals
CryptoCan make purchasesRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The name/description (trade Polymarket OnlyFans markets) matches the code: trader.py implements market classification and trading logic using a Simmer SDK client. Requiring an API key for a trading backend (SIMMER_API_KEY) and the simmer-sdk pip package is coherent with the stated purpose. However the top-level registry metadata listed earlier claimed 'Required env vars: none' while clawhub.json lists SIMMER_API_KEY — a clear metadata inconsistency that could mislead users about what secrets the skill needs.
!
Instruction Scope
SKILL.md states the 'default signal requires no external API' and emphasizes paper trading by default, but the package manifest and entrypoint show trader.py imports simmer_sdk and expects a Simmer client for execution. The SKILL.md and the runtime code disagree about whether an external API/credential is required. The instructions also claim the skill 'handles all the plumbing (market discovery, trade execution, safeguards)' — the code does support execution, which means the agent can place real trades when run live; SKILL.md's wording may understate this capability and the credential requirement.
Install Mechanism
There is no explicit install spec in the skill bundle, but clawhub.json declares a pip dependency 'simmer-sdk'. Installing a public pip package is a common mechanism, but users should validate the simmer-sdk package provenance before installation. No download-from-arbitrary-URL patterns were observed in the provided files.
Credentials
The single secret required by the manifest (SIMMER_API_KEY) is appropriate for a trading bot that needs to place orders. The code also reads several non-secret tunables (SIMMER_MAX_POSITION, SIMMER_MIN_VOLUME, etc.) which are used for risk controls. The inconsistency between 'Required env vars: none' (top-level metadata) and clawhub.json's SIMMER_API_KEY is concerning because a user might not realize they are granting a credential that can execute trades.
Persistence & Privilege
always:false and autostart:false (clawhub.json) mean the skill is not force-enabled globally. The automaton entrypoint is trader.py (managed), so the platform can run it when the user enables the skill — this is expected for a trading bot. Autonomous invocation (disable-model-invocation:false) is the platform default and not flagged alone, but combined with the credential requirement it increases the importance of reviewing permissions and default run modes.
What to consider before installing
Key things to consider before installing: - Metadata mismatch: the bundle's top-level metadata says no env vars required, but clawhub.json and trader.py require SIMMER_API_KEY and will install a simmer-sdk pip package. Treat the skill as a trading bot that needs an API key. - API key risk: SIMMER_API_KEY likely allows placing trades. Verify what permissions that key has (disable withdrawals, limit funds) and only provide a key with minimal privileges and limited balance. Test in paper/sim mode first. - Pip dependency: confirm the identity and trustworthiness of the 'simmer-sdk' package (author, PyPI project page, source code). Malicious or compromised packages can introduce risks beyond the skill's logic. - Live vs paper trading: the code mentions a --live flag and paper trading by default, but confirm the platform won't run live trades automatically without explicit user action. Keep autostart disabled until you have tested behavior. - Audit the entrypoint: trader.py contains the trading logic; review the remainder of that file (not fully included in the truncated excerpt) for any network calls, unexpected endpoints, or data exfiltration. Look for any hard-coded URLs or non-sdk HTTP requests. - Least privilege: only provide credentials with the narrowest scope necessary and monitor any activity logs from the backend (Simmer) after enabling. If you want, I can: (1) scan the remainder of trader.py for suspicious network calls or obfuscation, (2) help you check the simmer-sdk PyPI/project metadata, or (3) draft a checklist of minimal API-key permissions to request from the Simmer provider.

Like a lobster shell, security has layers — review code before you run it.

latestvk972rrgtty22ejfaajpwa176sx852seb
159downloads
0stars
4versions
Updated 1w ago
v0.0.2
MIT-0

OnlyFans Trader

This is a remixable template. The default signal requires no external API — it uses keyword-derived demographic multipliers, jurisdiction-specific regulatory priors, and date-based earnings seasonality applied on top of standard conviction sizing. The skill handles all the plumbing (market discovery, trade execution, safeguards). Your signal provides the alpha.

Strategy Overview

OnlyFans is one of the fastest-growing and most widely covered platforms in prediction markets — yet it is systematically mispriced in three distinct and exploitable ways.

1. Celebrity pipeline bias — Retail prices "will [celebrity] join OnlyFans?" based on general fame level, treating it as a rare or tabloid-worthy event. The actual base rate by demographic category tells a completely different story: reality TV contestants join at ~40%, Instagram models at ~30%, athletes at ~20%. Markets on reality TV show participants routinely sit at 15–20% — 2–3x below the historical base rate. We buy YES aggressively. Conversely, A-list Hollywood actors are priced at 15–25% when the true base rate is ~5% — tabloid speculation inflates prices above reality. We fade those.

2. Regulatory theater — Every 6–12 months a government announces it will "crack down on" or "ban" OnlyFans. These markets are priced by retail on political rhetoric. Legislative reality is different: the average time from "announced review" to enforceable legislation is 3–7 years, court injunctions routinely block enforcement, and VPN workarounds make practical bans largely unenforceable. Of 40+ announced restrictions since 2020, fewer than 3 resulted in enforceable law within 12 months. We systematically buy NO on ban markets.

3. Creator earnings seasonality — OnlyFans revenue is strongly seasonal, driven by the gift economy. The two weeks before Valentine's Day (February) is the single highest-revenue period for most creators. Black Friday, Christmas, and New Year also drive subscription spikes. Summer months show 10–20% lower-than-average activity. Earnings milestone markets that don't account for this seasonal structure are systematically off.

The Core Insight: Three Different Market Types, Three Different Edges

This skill classifies each market before trading it:

Market typeExampleEdgeDirection
join"Will [celebrity] join OnlyFans?"Pipeline base-rate × seasonStandard YES/NO
ban"Will OnlyFans be banned in [country]?"Regulatory theater fadeLean NO
earnings"Will [creator] earn $X by [date]?"Earnings seasonalityYES in peak, NO in trough

Signal Logic

Step 1 — Market classification (_classify_market)

Keywords route each market to a type:

  • ban, banned, restrict, blocked, shutdown, illegal, lawban
  • join, joining, create, start, sign up, openjoin
  • earn, revenue, million, subscriber, ipo, valuationearnings

Step 2 — Type-specific bias multiplier

Celebrity pipeline multiplier (join markets only):

Parsed from question keywords — no external lookup needed.

DemographicSignalsHistorical base rateMultiplier
Reality TV contestant"bachelor", "love island", "big brother", "real housewives", "survivor", "too hot to handle", "love is blind", "90 day fiance" + 20 more~40%1.35x
Influencer / model"influencer", "instagram model", "tiktok", "playboy", "fitness model"~30%1.20x
Athlete / sports personality"nfl", "nba", "ufc", "footballer", "wrestler"~20%1.10x
Musician (pop/hip-hop)"rapper", "singer", "pop star", "r&b"~15%1.00x
A-list actor"oscar winner", "hollywood actor", "movie star", "emmy"~5% (but often priced at 15–25%)0.75x (fade)
Unknown1.00x

Regulatory theater multiplier (ban markets only):

Jurisdiction determines how aggressively we fade the YES side:

JurisdictionReasonMultiplier
US / federalFirst Amendment constraints make platform bans near-impossible0.90x
UK / BritainAge verification laws exist, but full bans face strong opposition0.95x
EU / EuropeGDPR enforcement risk, not platform bans0.90x
AustraliaeSafety Office has powers but full bans historically blocked by courts0.85x
Authoritarian (China, Russia, UAE, Saudi, Iran)Real risk but still overpriced for speed1.10x
Generic1.00x

Earnings seasonality multiplier (earnings + join markets):

PeriodDriverMultiplier
November – FebruaryHoliday gifting, Valentine's Day ramp-up1.20x
March – AprilPost-peak normalization1.00x
May – OctoberSummer trough — lower subscription activity0.85x

Step 3 — Combined bias

join:     pipeline_mult × season_mult   (capped 0.65–1.40x)
ban:      regulatory_mult               (regulatory theater dominates)
earnings: season_mult                   (1.20x in Nov–Feb, 0.85x in summer)

Combined Examples (TODAY: March 22, 2026)

MarketTypePipelineSeasonRegulatoryFinal bias
"Will Love Island contestant X join OnlyFans?" — Marchjoin1.35x1.00x1.35x
"Will [Oscar-winner] join OnlyFans?" — Decemberjoin0.75x1.20x0.90x
"Will OnlyFans be banned in the US?"ban0.90x0.90x (lean NO)
"Will [creator] earn $1M by January?" — Novemberearnings1.20x1.20x
"Will [creator] reach 100k subscribers by August?"earnings0.85x0.85x

How Sizing Works

With defaults (YES_THRESHOLD=38%, NO_THRESHOLD=62%, MIN_TRADE=$5, MAX_POSITION=$30):

Reality TV contestant join market — March (1.35x bias):

Price pConvictionBiased convictionSize
38%0%0%$5 floor
25%34%46%$14
15%61%82%$25
5%87%100% capped$30

Keywords Monitored

join onlyfans, joining onlyfans, onlyfans account, start onlyfans,
create onlyfans, onlyfans page, sign up onlyfans,
onlyfans ban, ban onlyfans, onlyfans banned, onlyfans restrict,
onlyfans blocked, onlyfans regulation, onlyfans law,
onlyfans illegal, onlyfans shutdown, shut down onlyfans,
onlyfans earnings, onlyfans revenue, onlyfans subscribers,
onlyfans million, onlyfans income, onlyfans top creator,
onlyfans ipo, onlyfans valuation, onlyfans creator fund,
onlyfans policy, onlyfans adult content, onlyfans

Remix Signal Ideas

  • Social media signal detection: Wire a Twitter/X search for "[celebrity name] onlyfans" mention spikes — a 5x increase in mentions in 48 hours is a strong leading indicator that a market priced at 15% should reprice to 35–50%; the public announcement typically follows within 2–4 weeks of the social media buildup
  • Reality TV show calendar: Build a lookup of reality TV show air dates — contestants historically announce OnlyFans accounts 2–8 weeks post-finale when media attention is highest; a market resolving 3 months after a season finale that's priced at 20% for a female contestant is almost certainly underpriced
  • Legislative calendar: For ban markets, wire in legislative calendar data (congress.gov for US, parliament.uk for UK) — if no bill has been introduced or assigned to committee, the ban market for "within 12 months" should be ≤5%; if a bill has passed committee, the multiplier should flip from fade to back
  • Valentine's Day countdown: Hardcode an additional spike multiplier for earnings markets where the resolution date lands within 7 days of February 14 — this single week drives ~8–12% of annual creator revenue; markets systematically undervalue this concentration
  • Creator tier classification: Extend _classify_market to distinguish top-100 creators (known, named in question) from mid-tier — top creators have more predictable earnings trajectories; mid-tier has higher variance that the market tends to underprice on both tails

Safety & Execution Mode

The skill defaults to paper trading (venue="sim"). Real trades only with --live flag.

ScenarioModeFinancial risk
python trader.pyPaper (sim)None
Cron / automatonPaper (sim)None
python trader.py --liveLive (polymarket)Real USDC

autostart: false and cron: null — nothing runs automatically until you configure it in Simmer UI.

Required Credentials

VariableRequiredNotes
SIMMER_API_KEYYesTrading authority. Treat as high-value credential.

Tunables (Risk Parameters)

All declared as tunables in clawhub.json and adjustable from the Simmer UI.

VariableDefaultPurpose
SIMMER_MAX_POSITION30Max USDC per trade (reached at 100% conviction)
SIMMER_MIN_VOLUME3000Min market volume — lower bar since OnlyFans markets tend to be smaller
SIMMER_MAX_SPREAD0.08Max bid-ask spread (8%)
SIMMER_MIN_DAYS3Min days until resolution
SIMMER_MAX_POSITIONS8Max concurrent open positions
SIMMER_YES_THRESHOLD0.38Buy YES if market price ≤ this value
SIMMER_NO_THRESHOLD0.62Buy NO if market price ≥ this value
SIMMER_MIN_TRADE5Floor for any trade (min USDC regardless of conviction)

Dependency

simmer-sdk by Simmer Markets (SpartanLabsXyz)

Comments

Loading comments...