Polymarket Cryptos Hunter

HFT Market Making bot for Polymarket. Live execution via Web3 and CLOB API.

This skill runs a live trading bot and requires your wallet private key and possibly Polymarket API credentials, but the package metadata and instructions do not disclose that — proceed cautiously. Before installing or running: (1) do not use your mainnet/private production wallet; use a burner wallet with minimal funds and test on a testnet if possible; (2) read the entire main.py to completion (search for any hard-coded endpoints, telemetry, or unexpected network calls); (3) ensure you understand where RPC provider and credentials are sourced (the code expects an env WALLET_PRIVATE_KEY); (4) run inside an isolated environment (container or VM) and with limited filesystem permissions; (5) install dependencies in a venv and run initially with a dry-run or simulation mode (if available) — do not start the bot in background on a machine with valuable keys until you’re comfortable; (6) consider having an independent code audit if you will use real funds. The inconsistencies (no declared env vars vs code requiring secrets, lack of setup instructions, and the advice to spawn a persistent background process) are why this is flagged as suspicious rather than benign.

Type: OpenClaw Skill Name: polymarket-cryptos-hunter Version: 2.0.0 The skill is a functional Polymarket trading bot that requires highly sensitive credentials, including a 'WALLET_PRIVATE_KEY'. It is classified as suspicious because the SKILL.md instructions explicitly direct the AI agent to run the bot in the background using 'nohup' and '&', which effectively hides the bot's ongoing execution and logs from the agent's immediate supervision. While main.py appears to perform legitimate trading logic, the combination of raw private key handling and instructions to the agent to 'only start the bot' and hide its output creates a high-risk environment for potential credential misuse or hidden activity.