← Back to Skills Marketplace
yutou123

pmbuysell-polymarket

by taro · GitHub ↗ · v1.0.3 · MIT-0
cross-platform ⚠ suspicious
304
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install pmbuysell
Description
Executes Polymarket (pmbuysell) trade/balance via CLI or Python API. Use when the user or model needs to trade or query balances/positions. Auto-redeem is a...
Usage Guidance
This skill will read private keys and funder addresses from pmbuysell/.env and use them to sign/send real trades. The registry metadata incorrectly lists no required credentials — do not trust that. Only install/use this skill if you are deliberate about giving it access to private keys: prefer test accounts/funds, inspect the .env file location, and keep the project directory on a secure host. Be aware the skill caches derived API credentials to pmbuysell/data on disk (may contain secrets) and that an agent invoking the skill can place on-chain orders. If you cannot review the code or don't want automated trading access to private keys, do not install or provide real keys.
Capability Analysis
Type: OpenClaw Skill Name: pmbuysell Version: 1.0.3 The skill bundle facilitates Polymarket trading but exhibits high-risk credential handling practices and non-standard monetization. Specifically, 'polymarket_client.py' caches sensitive API credentials (key, secret, and passphrase) in plaintext JSON files within a local 'data' directory, which is a significant security vulnerability. Additionally, 'auto_redeem_cli.py' serves as a paywall that directs users to a Telegram handle (@taroers) for a 'Pro' version. While the core trading logic appears aligned with its stated purpose, the insecure storage of secrets and the external payment solicitation are suspicious indicators.
Capability Assessment
Purpose & Capability
The skill's stated purpose (execute Polymarket trades) legitimately requires private keys/funder addresses and optional builder/relayer creds; the code and SKILL.md expect a .env with PM_ACCOUNT_IDS and ACCx_PRIVATE_KEY/ACCx_FUNDER. However the registry metadata lists no required environment variables or primary credential — an incoherence that could mislead users about the sensitive data this skill needs.
Instruction Scope
SKILL.md confines instructions to running included CLIs and editing/initializing pmbuysell/.env in the project root, which is consistent with trading functionality. The instructions explicitly ask the agent to load private keys from .env (sensitive). They do not instruct reading arbitrary unrelated system files, but they do direct the agent to place secrets in a file that the skill will read and use to sign transactions — behavior that has real financial impact and should be limited to trusted environments.
Install Mechanism
No network download/install mechanism is embedded in the skill bundle; it's instruction-plus-source with a requirements.txt listing common packages (py-clob-client, web3, requests, python-dotenv). There is no use of external download URLs or archive extraction in the manifest.
Credentials
The code requires highly sensitive environment values (private keys ACCx_PRIVATE_KEY and funder addresses) and may optionally use builder API creds and RELAYER_URL for redeem functionality. Those credentials are proportionate to the stated trading purpose, but the registry metadata claims 'none' for required env vars/credentials, which is misleading and dangerous for less-technical users who may not realize they must supply private keys.
Persistence & Privilege
The skill does not request platform-wide 'always' presence and defaults permit autonomous invocation (platform default). The client caches derived API credentials to disk under pmbuysell/data (or a fallback file), which stores API keys/secrets locally — expected for convenience but a persistence/privacy consideration. The skill does not modify other skills or global agent config.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install pmbuysell
  3. After installation, invoke the skill by name or use /pmbuysell
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
- Added a requirements.txt file for dependency management. - Clarified dependency installation instructions in documentation: now includes explicit guidance for installing only the Skill's requirements or the full project's requirements. - Minor update to auto-redeem Pro module messaging.
v1.0.2
No user-facing changes in this version. All documentation and functionality remain the same.
v1.0.1
- Removed HTTP API instructions from documentation; now only CLI and Python API/函数调用 are documented as supported methods. - Updated Python示例为直接通过 skills.multi_account 路径导入 market_buy、market_sell、get_balance,并详细区分了调用返回的字典结构。 - 说明文档整体精简,去除了无关/冗余说明(如 HTTP 请求用法、接口安全说明等),更聚焦于主流程和配置。 - 细化 balance 查询示例和参数说明,推荐更直接/清晰的用法。
v1.0.0
Initial release of Polymarket trading skill. - Provides quick CLI, HTTP, and Python API methods for Polymarket trading, multi-account operations, and balance queries. - Supports auto slug generation and structured JSON output for trade results. - Includes CLI commands to initialize, check configuration, trade, and check balances/positions. - Auto-redeem (settlement) available as a separate paid Pro addon (pmbuysell_redeem). - Sample .env configurations for multiple accounts included.
Metadata
Slug pmbuysell
Version 1.0.3
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 4
Frequently Asked Questions

What is pmbuysell-polymarket?

Executes Polymarket (pmbuysell) trade/balance via CLI or Python API. Use when the user or model needs to trade or query balances/positions. Auto-redeem is a... It is an AI Agent Skill for Claude Code / OpenClaw, with 304 downloads so far.

How do I install pmbuysell-polymarket?

Run "/install pmbuysell" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is pmbuysell-polymarket free?

Yes, pmbuysell-polymarket is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does pmbuysell-polymarket support?

pmbuysell-polymarket is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created pmbuysell-polymarket?

It is built and maintained by taro (@yutou123); the current version is v1.0.3.

💬 Comments