Openclaw Bot Prob Trade

Autonomous trading bot for Polymarket via prob.trade. Run strategies, manage risk, scan markets. Requires the probtrade skill for API access.

This repo appears to be a legitimate autonomous trading bot that relies on the separate probtrade skill for API access. Before installing or running it: 1) Keep dry_run enabled and test with python3 scripts/bot.py scan and status to verify behavior. 2) Review and trust the probtrade skill implementation you install — the bot imports its api_client directly, so a malicious or trojaned probtrade skill would be executed. 3) Provide API keys only to the probtrade skill (not to unknown third parties) and secure them (use Docker or a separate service account, limit permissions, chmod 600 on .env). 4) If deploying to a server, prefer container/sandbox isolation (Docker, dedicated user) and monitor network traffic and logs. 5) Expect financial risk: the bot can place real orders when dry_run is disabled. 6) If you plan to use strategies that need LLM / NOAA / social API keys, add those credentials sparingly and review the specific strategy code. If you want additional assurance, request a review of the probtrade skill's api_client and the omitted code files for any unexpected network endpoints or secrets exfiltration.

Type: OpenClaw Skill Name: openclaw-bot-prob-trade Version: 1.0.1 The skill is designed for autonomous trading and uses external APIs for its functionality. It exhibits a significant vulnerability in `lib/engine.py` (and other strategy files like `lib/strategies/logic_arb.py`, `lib/strategies/weather_arb.py`, `lib/strategies/whale_tracking.py`) where it constructs `sys.path` using the `PROBTRADE_SKILL_PATH` environment variable. An attacker controlling this variable could inject a malicious `api_client.py` module, leading to arbitrary code execution. Additionally, the dynamic loading of strategy modules from `lib/strategies/__init__.py` presents a local file system vulnerability if an attacker can write files to that directory. While these are serious flaws that could enable attacks, there is no direct evidence of intentional malicious behavior such as data exfiltration or unauthorized remote control within the provided code. The external network calls are to legitimate trading and LLM APIs, and API keys are used as intended for authentication.