Polymarket Trade Agent

Trade on Polymarket by researching markets, analyzing event probabilities, managing USDC balance, and executing buy/sell orders with risk-controlled position...

This package implements a real trading client but asks you to provide your Polygon (Ethereum-style) private key — which gives full control over any funds in that wallet. Before installing or running it: - Only use a wallet/private key you control and which contains minimal funds for testing (preferably a throwaway or test account). Never use your main funds/private key. - Verify the source: the registry metadata and SKILL.md disagree about required env vars. Confirm the publisher and review the py-clob-client dependency and its trustworthiness. - Consider running the code in an isolated environment (VM or container) and inspect the code yourself; the files here are readable and show the network endpoints used (clob.polymarket.com and data-api.polymarket.com). - Note the SKILL.md guidance to export the raw private key from MetaMask is inherently risky — follow wallet best practices (use hardware wallets or signing-only flows where possible). If you must use an env var key, keep it in a restricted environment and rotate it afterward. - Test read-only commands (address, markets, balance) first. Be cautious with buy/sell: start with tiny trades and confirm behavior. If you want higher assurance, ask the publisher for provenance (homepage, source repo, or signed release) and a clear manifest of required environment variables and optional settings. If you cannot verify the author, treat the skill as high risk and avoid supplying a primary private key.

Type: OpenClaw Skill Name: polymarket-trade-agent Version: 1.0.1 The OpenClaw skill bundle implements a Polymarket trading agent. It requires the user to provide a `POLYMARKET_PRIVATE_KEY` for its functionality, which is a highly sensitive credential. However, the code uses this key solely for its stated purpose of interacting with legitimate Polymarket APIs (`data-api.polymarket.com`, `clob.polymarket.com`) for balance checks, market data, and order placement, as seen in `trade.py`. There is no evidence of data exfiltration to unauthorized third parties, persistence mechanisms, or other malicious activities. The `SKILL.md` instructions are clear, directly related to the agent's purpose, and do not contain any prompt injection attempts to mislead the AI agent.