Polymarket-AutoTrade

Polymarket prediction market CLI - Browse markets, check prices, execute trades, and manage portfolio.

This skill is internally consistent for a Polymarket trading CLI, but it requires your wallet private key — a high-value secret. Only install if you trust the code and the py-clob-client library. Before using: (1) Prefer setting credentials via environment variables rather than embedding raw keys in files; (2) Use a dedicated, funded-for-purpose wallet (as the docs recommend) — do NOT use your main wallet; (3) Ensure config files (~/.openclaw/credentials/*.json) have strict permissions (chmod 600); (4) Audit or review the trade-related code paths and the py-clob-client dependency to confirm signing happens locally and private key material is never transmitted in plain text; (5) Consider running the skill in an isolated environment or sandbox and monitor network calls to clob.polymarket.com and related Polymarket endpoints before trusting it with funds. If you want a higher-assurance recommendation, provide the full trade-related functions from skill.py and confirm which py-clob-client version will be installed so they can be audited.

Type: OpenClaw Skill Name: polymarket-autotrade Version: 1.1.1 The skill provides a CLI for Polymarket trading and requires the user's wallet private key (POLYMARKET_PRIVATE_KEY) and proxy address. While the implementation in skill.py appears to use the official py-clob-client for local transaction signing and communicates only with legitimate endpoints (clob.polymarket.com, polygon-rpc.com, and gamma-api.polymarket.com), the handling and local storage of raw private keys and the ability to execute financial transactions are high-risk capabilities. The skill also generates and caches API credentials locally in polymarket_api.json. No evidence of intentional malice or data exfiltration was found, but the sensitive nature of the required credentials warrants a suspicious classification.