Smart Money Trader

Trade Polymarket markets where PolyClawster whale signals are active. Fetches smart money signals (score 0-10) and buys YES/NO on Polymarket when whales are...

This skill appears to implement the advertised behavior (fetch PolyClawster signals and trade via Simmer) but there are important things to check before installing or providing credentials: - Env var name mismatches: The code expects SMART_MONEY_MIN_SCORE and SMART_MONEY_API_URL, while the documentation and clawhub tunables use SIMMER_SMARTMONEY_MIN_SCORE / SIMMER_SMARTMONEY_MAX_POSITION. Set both variants or update the code so tunables actually control the behavior; otherwise you may not get the signal thresholds you expect. - Trading credential risk: SIMMER_API_KEY allows the skill to place real trades. Test in paper mode first (set TRADING_VENUE=sim and run without --live) and confirm dry-run behavior. Do not provide the live API key until you have audited and tested. - Dependency risk: The skill requires simmer-sdk from PyPI. Verify the SimmerClient implementation (source, version) and consider installing dependencies in an isolated environment. - Run review steps: 1) Run python smart_money_signal.py --json to inspect fetched signals; 2) Run python smartmoney_trader.py (dry run) to see what would be traded; 3) Review clawhub.json tunables and decide whether to correct env var names; 4) Consider running in a sandbox/container until you trust it. - If you are not comfortable with code changes, ask the publisher to fix the env var naming mismatch and to provide a homepage/source repo for provenance. The current inconsistencies are likely sloppy engineering rather than malicious, but they materially affect safety when giving trading API credentials.

Type: OpenClaw Skill Name: yh-polymarket-smart-money Version: 1.0.0 The skill bundle is a functional trading bot designed to execute trades on Polymarket based on signals from the PolyClawster API. The code in `smartmoney_trader.py` and `smart_money_signal.py` follows the stated purpose, using the `simmer-sdk` for market interaction and standard Python libraries for fetching signal data. No evidence of data exfiltration, malicious execution, or prompt injection was found; the behavior is consistent with a legitimate automated trading utility.