Simmer Skills

Trade prediction market contracts on simmer.markets using virtual or real funds with configurable risk limits and portfolio briefings via API or Python SDK.

What to consider before installing: - This skill will read your local Simmer API key from ~/.config/simmer/credentials.json and will call https://api.simmer.markets to fetch briefings, list markets, and place trades. If you have real funds linked (polymarket), the scripts support USDC trades. - The package mentions an encrypted private-key file and an external 'fear-harvester' integration that 'decrypts' and switches venue to polymarket. That external script is not included; understand where that decryption would run and who controls it before allowing this skill to run with your keys. - Metadata vs runtime mismatch: the registry metadata does not declare required credential/config paths, but SKILL.md and scripts require them. SKILL.md also contains an always: true flag which would make the skill load always; verify the platform's effective metadata and avoid enabling always: true unless intentional. - Safe steps before enabling: - Inspect the credentials file and ensure you use a dedicated trading wallet (not your main wallet) and minimal funds. - Run the pipeline in dry-run mode (--dry-run) and ensure no automatic real-money trades occur. - Audit and sandbox: run the scripts in an isolated environment or container, and confirm no unexpected network endpoints are contacted beyond api.simmer.markets. - If you plan to use real USDC trading, confirm where and how any private-key decryption is performed and who has access to that decryption code/keys. - If you are not comfortable reviewing or controlling the private-key decryption/integration, do not install or enable this skill with access to real credentials/funds.

Type: OpenClaw Skill Name: simmer-skills Version: 1.0.0 The skill bundle provides automated trading capabilities for the Simmer prediction market, including high-risk functionality for real-money USDC transactions on Polymarket. The `SKILL.md` file explicitly directs the AI agent to sensitive file paths containing API credentials (`~/.config/simmer/credentials.json`) and encrypted private keys (`simmer-polymarket-private-key.txt.enc`). While the included Python scripts (`execute.py`, `brief.py`, `score.py`) appear functionally consistent with the stated purpose and incorporate safety rails like trade limits and dry-run modes, the combination of financial asset management and the exposure of sensitive credential locations to the agent's prompt context constitutes a high-risk capability susceptible to prompt injection or accidental financial loss.