Polymarket Scanner
v1.0.0Automated Polymarket prediction market scanner and trader via Simmer API. Use when analyzing prediction markets, scanning for trading opportunities, executin...
⭐ 0· 290·1 current·1 all-time
by@wyzmf
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description align with code: the script talks only to the Simmer API (agents/me, positions, markets/opportunities, context, trade) and requires a SIMMER_API_KEY. No unrelated services or binaries are requested.
Instruction Scope
SKILL.md claims safety controls like 'SIM auto, USDC manual' and 'Real USDC trades require human confirmation', but the scanner.py implementation will POST trade requests unconditionally for qualifying opportunities (it does not implement an explicit human confirmation step or a separate flow for virtual vs real trades). This creates a risk the agent will execute real-money trades contrary to the documentation.
Install Mechanism
No install spec; this is an instruction-only skill with a single Python script and no downloads or extracted archives. Lowest-risk install model.
Credentials
The SKILL.md documents only SIMMER_API_KEY as required, which matches the code. The script also reads several optional SCANNER_* env vars (SCANNER_MIN_SCORE, SCANNER_MIN_DIVERGENCE, SCANNER_MAX_POSITIONS, SCANNER_TRADE_PCT, SCANNER_MAX_TRADE, SCANNER_MIN_BALANCE, SCANNER_MAX_SPREAD) controlling thresholds — these are reasonable but not documented in SKILL.md. Only the Simmer API key is required; no unrelated credentials are requested.
Persistence & Privilege
always is false and the skill does not modify other skills or system settings. It writes a local trading_log.jsonl file (in the repository parent) for its own logs, which is expected behavior.
Assessment
This skill is internally consistent with its stated purpose and only needs your SIMMER_API_KEY, but review and test before letting it trade real funds. Important points:
- The code will automatically call the Simmer trade endpoint for qualifying opportunities; it does not implement an explicit human confirmation step for real (USDC) trades despite the SKILL.md claiming one — if you plan to trade real money, modify the script to require manual approval or double-check the agent's real_trading_enabled state before auto-executing.
- Store SIMMER_API_KEY securely (do not paste into public logs). The script logs trade events to trading_log.jsonl in the parent directory — inspect or restrict that file if it will contain sensitive info.
- The script supports optional SCANNER_* environment variables to tune behavior; consider setting conservative limits (lower trade_pct, lower max_trade) when testing.
- Run first in a safe environment (e.g., with a test/virtual SIM account) to verify behavior and confirm it only trades as you expect.
Given the financial risk, do not install or run this with live API keys until you have reviewed and (if needed) modified the automatic-trade behavior.Like a lobster shell, security has layers — review code before you run it.
latestvk973xfcqsmffhqe9d36gvjzgss824g3f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.