Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Smart Money Trader

v1.0.0

Trade Polymarket markets where PolyClawster whale signals are active. Fetches smart money signals (score 0-10) and buys YES/NO on Polymarket when whales are...

0· 80·0 current·0 all-time
byzylorra@yhlorra

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for yhlorra/yh-polymarket-smart-money.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Smart Money Trader" (yhlorra/yh-polymarket-smart-money) from ClawHub.
Skill page: https://clawhub.ai/yhlorra/yh-polymarket-smart-money
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install yh-polymarket-smart-money

ClawHub CLI

Package manager switcher

npx clawhub@latest install yh-polymarket-smart-money
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description, code, and requirements align: the skill fetches signals from polyclawster.com and uses a Simmer SDK client to import markets and place trades on Polymarket. Declared pip deps (simmer-sdk, python-dotenv) are consistent with code imports.
Instruction Scope
Runtime instructions are narrow and consistent with the stated purpose (fetch → match → trade). The code only reads a local .env and environment variables, contacts polyclawster.com and (via SimmerClient) the trading venue, and does not access unrelated files or external endpoints. However, the SKILL.md and clawhub.json document env vars named SIMMER_SMARTMONEY_MIN_SCORE / SIMMER_SMARTMONEY_MAX_POSITION while smart_money_signal.py actually reads SMART_MONEY_MIN_SCORE and SMART_MONEY_API_URL — this mismatch can make tunables ineffective and is an incoherence to fix.
Install Mechanism
Registry shows no formal install script but clawhub.json lists pip packages (simmer-sdk, python-dotenv). Installing pip packages is expected for this skill but is a moderate-risk install mechanism (third-party PyPI packages). No downloads from unknown URLs or archive extraction were observed.
!
Credentials
The main required secret is SIMMER_API_KEY, which is proportional to a trading skill. Concern: multiple environment variable names are used inconsistently across SKILL.md, clawhub.json, and code (e.g., SIMMER_SMARTMONEY_MIN_SCORE vs SMART_MONEY_MIN_SCORE, SMART_MONEY_API_URL not documented). This mismatch risks unexpected behavior and could lead to running live trades with unintended parameters if users assume the documented tunables are applied. No unrelated credentials are requested.
Persistence & Privilege
always:false and autostart:false. clawhub.json marks automaton.managed true with an entrypoint, but autostart is false so the skill will not run automatically unless enabled. The skill does not attempt to modify other skills or global config.
What to consider before installing
This skill appears to implement the advertised behavior (fetch PolyClawster signals and trade via Simmer) but there are important things to check before installing or providing credentials: - Env var name mismatches: The code expects SMART_MONEY_MIN_SCORE and SMART_MONEY_API_URL, while the documentation and clawhub tunables use SIMMER_SMARTMONEY_MIN_SCORE / SIMMER_SMARTMONEY_MAX_POSITION. Set both variants or update the code so tunables actually control the behavior; otherwise you may not get the signal thresholds you expect. - Trading credential risk: SIMMER_API_KEY allows the skill to place real trades. Test in paper mode first (set TRADING_VENUE=sim and run without --live) and confirm dry-run behavior. Do not provide the live API key until you have audited and tested. - Dependency risk: The skill requires simmer-sdk from PyPI. Verify the SimmerClient implementation (source, version) and consider installing dependencies in an isolated environment. - Run review steps: 1) Run python smart_money_signal.py --json to inspect fetched signals; 2) Run python smartmoney_trader.py (dry run) to see what would be traded; 3) Review clawhub.json tunables and decide whether to correct env var names; 4) Consider running in a sandbox/container until you trust it. - If you are not comfortable with code changes, ask the publisher to fix the env var naming mismatch and to provide a homepage/source repo for provenance. The current inconsistencies are likely sloppy engineering rather than malicious, but they materially affect safety when giving trading API credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk974g5rha64p7nr4a3x4g3cec184d4x2
80downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

Polymarket Smart Money Trader

Follow whale and high-conviction trader signals on Polymarket via PolyClawster API.

What It Does

  1. Fetches active whale/trader signals from PolyClawster API (polyclawster.com/api/signals)
  2. Matches signals to live Polymarket markets via Simmer SDK
  3. Trades YES/NO based on signal direction and conviction score

Quick Start

# Dry run (show opportunities, no trades)
python smartmoney_trader.py

# Live trading on Polymarket
python smartmoney_trader.py --live

# Only high-confidence signals (score 8+)
python smartmoney_trader.py --min-score 8

# Show current positions
python smartmoney_trader.py --status

Signal Score

ScoreConvictionPosition Size Multiplier
7-8Medium70-80% of max position
8-9High80-90% of max position
9-10Very High90-100% of max position

Max position per trade: $SIMMER_SMARTMONEY_MAX_POSITION (default: $10)

Environment Variables

VariableDefaultDescription
SIMMER_API_KEYrequiredFrom https://simmer.markets/dashboard
TRADING_VENUEpolymarketpolymarket for real USDC, sim for $SIM
SIMMER_SMARTMONEY_MIN_SCORE7Minimum signal score to trade
SIMMER_SMARTMONEY_MAX_POSITION10.0Max position size in USD

Architecture

smart-money-trader/
├── smartmoney_trader.py   # Main entrypoint (scan → match → trade)
├── smart_money_signal.py  # PolyClawster API client + signal normalization
└── clawhub.json           # ClawHub + Automaton config

Risk Controls

  • Signal threshold: Only trades scores ≥ min_score (default 7)
  • Position sizing: Scales with conviction score (1.0x - 1.0x of max)
  • Venue guardrails: TRADING_VENUE=sim for virtual, omit --live for paper
  • Circuit breaker: 3 consecutive losses → pause (via Simmer SDK)

Comments

Loading comments...