Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Polymarket

v1.0.0

Polymarket sports prediction markets — live odds, prices, order books, events, series, and market search. No auth required. Covers NFL, NBA, MLB, football (E...

0· 68·0 current·0 all-time
byAndré Antonelli@antonelli182

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for antonelli182/sports-skills-polymarket.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Polymarket" (antonelli182/sports-skills-polymarket) from ClawHub.
Skill page: https://clawhub.ai/antonelli182/sports-skills-polymarket
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install sports-skills-polymarket

ClawHub CLI

Package manager switcher

npx clawhub@latest install sports-skills-polymarket
Security Scan
Capability signals
CryptoRequires wallet
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The name/description (Polymarket sports prediction markets) matches the SKILL.md, API references, and commands. The skill is primarily read-only and documents which endpoints (Gamma / CLOB) to call; trading functionality is optional and clearly marked as requiring a Python SDK and a wallet private key.
Instruction Scope
SKILL.md instructs only API queries, CLI usage, and parameter validation. It does not ask the agent to read unrelated system files or contact unexpected third-party endpoints. It does, however, instruct users to configure a wallet and suggests setting POLYMARKET_PRIVATE_KEY in environment/.env for trading — this is out-of-band sensitive data referenced in the runtime instructions (but limited to trading operations).
Install Mechanism
There is no install spec and no network download of code; the skill is instruction-only with one small shell helper script. Trading requires an optional pip install (sports-skills[polymarket]) which is reasonable and documented.
!
Credentials
The repo does not declare required env vars, yet the docs reference POLYMARKET_PRIVATE_KEY for trading. That mismatch can be confusing and is security-relevant: if you place a private key in an env var or .env and allow the agent to invoke the skill autonomously, the agent could execute trading commands that use your wallet. The skill does not request unrelated credentials.
Persistence & Privilege
always:false and no system-level config changes are requested. Autonomous invocation is allowed (platform default). Combine that with a supplied private key and the skill could place trades autonomously — not an inherent flaw in the skill but a risk the user must manage.
Assessment
This skill appears to be a straightforward read-only Polymarket query helper; trading features are optional but require a wallet private key. Before installing or using: (1) do not paste your real wallet private key into environment variables or .env unless you understand the risk; prefer a dedicated, low-value wallet for automation/testing; (2) if you want read-only use, do not set POLYMARKET_PRIVATE_KEY anywhere accessible to the agent; (3) if you must enable trading, confirm the platform will prompt/require explicit consent before executing trades or disable autonomous invocation for this skill; (4) verify the external endpoints (gamma-api.polymarket.com, clob.polymarket.com) are expected and that you trust them; (5) the skill's source/homepage are not listed — if provenance matters, ask the publisher for a source repo or homepage before trusting it with sensitive credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a2d7r5fvnc95d268d4mpgrd84nw0h
68downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

Polymarket — Sports Prediction Markets

Before writing queries, consult references/api-reference.md for sport codes, command parameters, and price format.

Quick Start

Prefer the CLI — it avoids Python import path issues:

sports-skills polymarket search_markets --sport=nba --sports_market_types=moneyline
sports-skills polymarket get_todays_events --sport=epl
sports-skills polymarket search_markets --sport=epl --query="Leeds" --sports_market_types=moneyline
sports-skills polymarket get_sports_config

Python SDK (alternative):

from sports_skills import polymarket

polymarket.search_markets(sport='nba', sports_market_types='moneyline')
polymarket.get_todays_events(sport='epl')
polymarket.search_markets(sport='epl', query='Leeds')
polymarket.get_sports_config()

CRITICAL: Before Any Query

CRITICAL: Before calling any market endpoint, verify:

  • The sport parameter is always passed to search_markets and get_todays_events for single-game markets.
  • Prices are probabilities on a 0-1 scale (0.65 = 65%) — no conversion needed.
  • For price/orderbook endpoints, use token_id (CLOB), not market_id (Gamma). Call get_market_details first to get clobTokenIds.

Without the sport parameter:

WRONG: search_markets(query="Leeds")           → 0 results
RIGHT: search_markets(sport='epl', query='Leeds') → returns all Leeds markets

Prerequisites

Core commands (no dependencies, no API keys): All read commands work out of the box.

Trading commands require py_clob_client:

pip install sports-skills[polymarket]

Additionally requires a configured wallet:

export POLYMARKET_PRIVATE_KEY=0x...

Workflows

Find Single-Game Markets for a Sport

  1. search_markets --sport=nba (or epl, nfl, bun, etc.)
  2. Each market includes outcomes with prices (price = probability).
  3. For detailed prices, use get_market_prices --token_id=<clob_token_id>.

Today's Events for a League

  1. get_todays_events --sport=epl — returns events sorted by start date.
  2. Each event includes nested markets (moneyline, spreads, totals, props).
  3. Pick a market, get clob_token_id from outcomes, then get_market_prices.

Live Odds Check

  1. search_markets --sport=nba --query="Lakers" --sports_market_types=moneyline
  2. get_market_prices --token_id=<id> for live CLOB prices.
  3. Present probabilities.

Price Trend Analysis

  1. Find market via search_markets --sport=nba.
  2. Get clob_token_id from the outcomes.
  3. get_price_history --token_id=<id> --interval=1w
  4. Present price movement.

Commands

CommandDescription
get_sports_configAvailable sport codes
get_todays_eventsToday's events for a league
search_marketsFind markets by sport, keyword, and type
get_sports_marketsBrowse all sports markets
get_sports_eventsBrowse sports events
get_seriesList series (leagues)
get_market_detailsSingle market details
get_event_detailsSingle event details
get_market_pricesCurrent CLOB prices
get_order_bookFull order book
get_price_historyHistorical prices
get_last_trade_priceMost recent trade

See references/api-reference.md for full parameter lists and return shapes.

Examples

Example 1: Tonight's NBA favorites User says: "Who's favored in tonight's NBA games?" Actions:

  1. Call search_markets(sport='nba', sports_market_types='moneyline') Result: Each matchup with implied win probabilities (price = probability)

Example 2: Team-specific odds User says: "Show me Leeds vs Man City odds" Actions:

  1. Call search_markets(sport='epl', query='Leeds', sports_market_types='moneyline') Result: Leeds moneyline market with outcome prices

Example 3: Today's EPL events User says: "What EPL matches are on today?" Actions:

  1. Call get_todays_events(sport='epl') Result: Today's EPL events with nested markets (moneyline, spreads, totals, props)

Example 4: League winner futures User says: "Who will win the Premier League?" Actions:

  1. Call search_markets(query='Premier League') — returns futures
  2. Sort results by Yes outcome price descending Result: Top contenders ranked by win probability

Example 5: Bundesliga odds User says: "Show me Bundesliga odds for Dortmund vs Bayern" Actions:

  1. Call search_markets(sport='bun', query='Dortmund', sports_market_types='moneyline') Result: Dortmund/Bayern moneyline market with outcome prices

Commands that DO NOT exist — never call these

  • cli_search_markets — does not exist. Use search_markets instead.
  • cli_sports_list — does not exist. Use get_sports_config instead.
  • get_market_odds / get_odds / get_current_odds — prices ARE probabilities. Use get_market_prices(token_id=...).
  • get_implied_probability — the price IS the implied probability.
  • get_markets — use get_sports_markets (browse) or search_markets (search).
  • get_team_schedule — this is a football-data command, not polymarket.

If a command is not listed in references/api-reference.md, it does not exist.

Troubleshooting

Error: search_markets returns 0 results Cause: The sport parameter is missing — without it, search only checks high-volume markets and misses single-game events Solution: Always pass sport='<code>' to search_markets. Check references/api-reference.md for valid sport codes

Error: get_market_prices fails or returns wrong data Cause: market_id (Gamma) was used instead of token_id (CLOB) Solution: Call get_market_details(market_id=<id>) first to get the CLOB clobTokenIds, then use those with get_market_prices

Error: Prices seem stale or unchanged Cause: Low-liquidity market — may have wide spreads and infrequent trades Solution: Check get_last_trade_price(token_id=<id>) for the most recent actual trade price

Error: Trading commands fail Cause: py_clob_client is not installed or wallet is not configured Solution: Run pip install sports-skills[polymarket] and set POLYMARKET_PRIVATE_KEY environment variable

Comments

Loading comments...