← Back to Skills Marketplace
433
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install polyclaw-2
Description
Trade on Polymarket via split + CLOB execution. Browse markets, track positions with P&L, discover hedges via LLM. Polygon/Web3.
Usage Guidance
Do not supply a real private key or production funds to this skill as-is. The SKILL.md expects python scripts (scripts/polyclaw.py, etc.) that are not included in the package — you should only install or run this if the skill provides its code or points to a verifiable upstream repository. Ask the publisher for the missing code and for a reproducible install (requirements, Python runtime, and a manifest). Confirm whether OPENROUTER_API_KEY and HTTPS_PROXY are required and why they were omitted from registry metadata. If you test, use a throwaway wallet with tiny balances, inspect all scripts before running them, and verify the brew 'uv' formula source. If the publisher cannot provide source code or a trusted repository, treat the skill as untrusted.
Capability Analysis
Type: OpenClaw Skill
Name: polyclaw-2
Version: 0.1.0
The skill requires sensitive credentials, specifically `POLYCLAW_PRIVATE_KEY` and `OPENROUTER_API_KEY`, to be stored as environment variables for its operation. While the `SKILL.md` explicitly warns about the security risks associated with this practice, it represents a significant vulnerability due to the insecure handling and potential exposure of private keys and API keys. No evidence of malicious intent such as data exfiltration, unauthorized remote execution, persistence mechanisms, or prompt injection attempts against the agent was found in the provided files.
Capability Assessment
Purpose & Capability
The stated purpose (trading on Polymarket via Polygon RPC and an EVM private key) matches the declared CHAINSTACK_NODE and POLYCLAW_PRIVATE_KEY requirements. Use of an LLM for hedge-discovery is plausible and the uv binary could be a task runner for the workflow.
Instruction Scope
SKILL.md repeatedly instructs the agent to run python scripts (e.g., scripts/polyclaw.py) and to perform on‑chain approvals and trades, but the skill bundle contains no code files. The instructions reference environment variables beyond those declared in registry metadata (OPENROUTER_API_KEY, HTTPS_PROXY, CLOB_MAX_RETRIES) and assume a 'python' runtime without declaring it. Running the described approval and trading commands would broadcast transactions using the private key supplied in an env var—this is expected for trading but should only occur if you know what code will execute. The absence of the actual scripts is a major mismatch.
Install Mechanism
The only install step is a brew formula for 'uv' which is consistent with the SKILL.md's use of 'uv'. There is no high‑risk remote download in the metadata. However, 'uv' installing via brew is the only installation provided and no mechanism is present to install Python dependencies or the referenced scripts, which is inconsistent.
Credentials
Primary credential POLYCLAW_PRIVATE_KEY and CHAINSTACK_NODE are proportionate to a trading skill. However SKILL.md requires OPENROUTER_API_KEY for LLM-based hedge discovery and suggests HTTPS_PROXY and other runtime settings, yet the registry metadata only declared CHAINSTACK_NODE and POLYCLAW_PRIVATE_KEY. The skill therefore references env vars not declared as required; storing an EVM private key in an env var is convenient but risky — the SKILL.md warns about this, but the missing code increases the risk of unknown key usage or exfiltration.
Persistence & Privilege
The skill is not marked always:true and uses normal autonomous invocation defaults. It does not request system config paths or other skills' credentials.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install polyclaw-2 - After installation, invoke the skill by name or use
/polyclaw-2 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of polyclaw-2.
Key features and usage highlights:
- Browse Polymarket markets, view details, and search by keyword.
- Trade on Polymarket via split + CLOB execution (YES/NO positions), with support for market hedging.
- Manage wallet and contract approvals via environment variable (`POLYCLAW_PRIVATE_KEY`).
- Track all positions with entry prices, P&L, and wallet status.
- Hedge discovery using LLM-based analysis with multiple output and filtering options.
- Includes CLI usage examples, proxy support for CLOB, environment variable setup, and troubleshooting guidance.
Metadata
Frequently Asked Questions
What is Polyclaw?
Trade on Polymarket via split + CLOB execution. Browse markets, track positions with P&L, discover hedges via LLM. Polygon/Web3. It is an AI Agent Skill for Claude Code / OpenClaw, with 433 downloads so far.
How do I install Polyclaw?
Run "/install polyclaw-2" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Polyclaw free?
Yes, Polyclaw is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Polyclaw support?
Polyclaw is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Polyclaw?
It is built and maintained by woody2434 (@woody2434); the current version is v0.1.0.
More Skills