← Back to Skills Marketplace
364
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install polymarket-btc-5m-arbitrage
Description
Polymarket BTC 5分钟高频套利机器人 - 自动交易BTC涨跌预测市场，支持 SkillPay 计费
Usage Guidance
Do not run this code unmodified. Specific recommendations:
- Treat the hardcoded SKILLPAY_API_KEY value as suspicious; remove any embedded API keys before running and replace with your own keys only if you trust the billing provider. Hardcoded secret keys can be abused to charge users or route payments to the developer.
- Be aware the code advertises automatic trading but contains no order-submission logic; if you expect a trading bot, this code is incomplete—do not provide your POLYMARKET_PRIVATE_KEY until you audit or implement secure signing/ordering logic.
- If you plan to run it: audit all network calls (requests) and confirm endpoints, remove or replace the embedded billing key, and run in a sandboxed environment or test account with minimal funds.
- Ask the publisher for clarity: why do registry metadata and required-env declarations omit POLYMARKET_* and SKILLPAY_* keys, and is the hardcoded billing key intentional? If you cannot get satisfactory answers, avoid installing or using this skill.
Capability Analysis
Type: OpenClaw Skill
Name: polymarket-btc-5m-arbitrage
Version: 1.0.1
The skill bundle claims to be an automated high-frequency trading bot for Polymarket, but the provided code in `scripts/polymarket_btc_5m_bot.py` only implements market scanning and logging of opportunities, lacking any actual order execution or transaction signing logic. It explicitly requests a highly sensitive `POLYMARKET_PRIVATE_KEY` via environment variables or `config.json` without demonstrating a functional use for it. Furthermore, it integrates a third-party monetization service (`skillpay.me`) with hardcoded developer API keys, which is unusual for open-source skill bundles and may indicate a deceptive 'pay-to-play' scheme for non-functional software.
Capability Assessment
Purpose & Capability
The skill's name/description claim automated trading (orders, market-making), but the provided Python bot only scans markets and logs arbitrage opportunities; there is no code that places orders or interacts with Polymarket order endpoints. Also the registry lists no required environment variables, yet SKILL.md and the code expect POLYMARKET_PRIVATE_KEY and POLYMARKET_API_KEY (for trading) and SKILLPAY_API_KEY (billing). This mismatch suggests the manifest/metadata are incomplete or misleading.
Instruction Scope
SKILL.md instructs users to set private keys and API keys and to run the bot. The code reads .env and environment variables and makes outbound requests to polymarket endpoints and to skillpay.me for billing. It does not attempt to read unrelated local files, but it will use environment-stored private keys if provided (sensible for trading) and will attempt to charge users via SkillPay. The risk: the SKILLPAY usage is automatic and a hardcoded key is present so billing behavior may not be what users expect.
Install Mechanism
No install script or remote downloads; this is an instruction-plus-source package with no networked install steps. That lowers filesystem/remote-exec risk. However, running the included Python scripts will execute network calls in-process (requests) and may perform financial operations if code is changed or extended.
Credentials
The code requires sensitive credentials (POLYMARKET_PRIVATE_KEY and POLYMARKET_API_KEY) appropriate for trading, but the registry declares none—an incoherence. Critically, a SKILLPAY_API_KEY default is hardcoded into two files (looks like a private key string 'sk_...'), meaning the package contains an embedded secret that will be used to bill/charge via skillpay.me if the user does not override it. Embedding a live billing API key in distributed code is a high-risk anti-pattern (financial/exfiltration risk).
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide privileges. It does run continuously (in its own process when executed) but does not modify other skills or agent configs. Autonomous agent invocation is permitted by default but not by itself a concern here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install polymarket-btc-5m-arbitrage - After installation, invoke the skill by name or use
/polymarket-btc-5m-arbitrage - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added support for SkillPay billing system (optional): users must pay before accessing, non-paying users are given a payment link, and developers receive 95% of revenue.
- Updated documentation to reflect billing option and provide configuration examples for SkillPay.
- General improvements to usage instructions and feature descriptions.
Metadata
Frequently Asked Questions
What is Polymarket BTC 5m Arbitrage?
Polymarket BTC 5分钟高频套利机器人 - 自动交易BTC涨跌预测市场，支持 SkillPay 计费. It is an AI Agent Skill for Claude Code / OpenClaw, with 364 downloads so far.
How do I install Polymarket BTC 5m Arbitrage?
Run "/install polymarket-btc-5m-arbitrage" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Polymarket BTC 5m Arbitrage free?
Yes, Polymarket BTC 5m Arbitrage is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Polymarket BTC 5m Arbitrage support?
Polymarket BTC 5m Arbitrage is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Polymarket BTC 5m Arbitrage?
It is built and maintained by whh110112 (@whh110112); the current version is v1.0.1.
More Skills