← Back to Skills Marketplace
615
Downloads
1
Stars
1
Active Installs
26
Versions
Install in OpenClaw
/install polyclawster-agent
Description
Trade on Polymarket prediction markets. Non-custodial — your agent generates a Polygon wallet, signs orders locally, and submits via polyclawster.com relay (...
Usage Guidance
This skill appears to do what it says, but before installing consider: (1) It generates and stores a private key and CLOB credentials in ~/.polyclawster/config.json — ensure you trust the code and secure that file (restrict permissions). (2) The skill will call polyclawster.com and Polymarket/Polygon RPC endpoints and will submit signed orders via the relay — verify you trust polyclawster.com as a relay. (3) Approvals/allowances are large by default (approve.js sets a very large USDC spending cap) — review and, if desired, reduce the allowance or revoke it after trades. (4) Start in demo mode and fund with a small amount first; review setup.js and the functions that implement httpGet/postJSON/loadConfig to confirm config handling; if you need higher assurance, inspect setup.js (not shown in full) to ensure it does not transmit private keys. (5) npm install pulls standard libraries (ethers, clob client); only install if you trust the upstream code/repository provenance.
Capability Analysis
Type: OpenClaw Skill
Name: polyclawster-agent
Version: 2.0.1
The skill is a Polymarket trading bot that manages a local Polygon wallet and uses a third-party relay (polyclawster.com) for geo-bypass and transaction submission. While the documentation is extensive and the logic appears consistent with its stated purpose, the code in scripts/setup.js and scripts/trade.js employs minor obfuscation (string replacement like 'agentKey'.replace('agent', 'private')) to hide the access of the 'privateKey' property from static analysis. Handling raw private keys and routing signed transactions through a centralized relay (polyclawster.com) introduces significant security risks, although no clear evidence of intentional key exfiltration was found.
Capability Assessment
Purpose & Capability
Name/description (Polyclawster, non-custodial Polymarket trading) align with what the package ships: node scripts for setup, trade, swap, approvals, monitoring, and an npm install for ethers and clob-client. Required binary is node and network hosts are Polyclawster/Polymarket/Polygon RPC — all expected for this purpose.
Instruction Scope
SKILL.md and scripts instruct the agent to create a local wallet and store config at ~/.polyclawster/config.json (private key + CLOB creds), run npm install --production, call polyclawster.com and Polymarket/clob endpoints, and optionally run autonomous trading (auto.js). These actions are in-scope for a trading agent, but they do include writing a local file with secret material and making network calls to the relay and APIs — user should be aware of where secrets are stored and which hosts are contacted.
Install Mechanism
Install is an npm install --production of dependencies declared in package.json (ethers, @polymarket/clob-client, oauth-1.0a). This is a normal package registry install from npm (no arbitrary download URLs or extracts).
Credentials
The skill asks for no environment variables and only requires node. It does read/write ~/.polyclawster/config.json to store the private key and CLOB API credentials. That is proportional to the stated non-custodial design but represents sensitive local secret storage that the user must accept.
Persistence & Privilege
The skill writes a config file under the user's home (~/.polyclawster/config.json) and can run autonomous trading (auto.js) when invoked by the agent. always:false (default) and no system-wide modifications are requested. Persistence is limited to the skill's config file, which is expected but worth highlighting as it contains the private key and creds.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install polyclawster-agent - After installation, invoke the skill by name or use
/polyclawster-agent - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.1
polyclawster-agent 2.0.1
- Updated core scripts: balance.js, monitor.js, and swap.js.
- package.json updated (likely dependency or metadata adjustments).
- Improvements and refinements for trading, balance checking, and swap logic.
- Bug fixes and minor enhancements across trading scripts.
v2.0.0
polyclawster-agent v2.0.0
- Major update across 11 files, including core trading, balance, setup, approval, and automation scripts.
- Improved agent setup and registration flow for easier onboarding.
- Enhanced reliability and clarity in trading, swap, and approval operations.
- Scripts reorganized and updated for more robust, user-friendly automation and error handling.
- Full feature and script reference updated in documentation for a clearer overview.
v1.9.2
- Cleanup release: removed unused scripts and external protocol documentation.
- Deleted 6 legacy files, including batch status scripts and EXTERNAL_AGENT_PROTOCOL.md.
- Core trading and setup scripts updated and retained; no user-facing features changed.
- Reduces codebase size and streamlines maintenance, with no impact on current user workflows.
v1.9.1
Version 1.9.1 introduces new monitoring and strategy scripts, removes unused documentation and legacy scripts, and adds protocol documentation.
- Added new scripts: batch-monitor.js, hourly-status.js, news-dryrun-cron.js, record-external.js, and strategy-card.js for expanded automation and monitoring.
- Added EXTERNAL_AGENT_PROTOCOL.md for improved integration and agent protocol documentation.
- Removed multiple legacy documentation files and deprecated scripts to streamline the codebase.
- Updated core files (README.md, package.json) for accuracy and consistency with new features.
v1.9.0
- Major cleanup: removed 45 outdated files, including documentation, configs, and legacy memory content.
- Core functionality and scripts remain unchanged.
- Project directory is now leaner and easier to maintain.
v1.8.0
polyclawster-agent v1.8.0
- Major documentation update: many new markdown docs added for agents, bootstrap, heartbeat, keys, soul, tools, users, growth plans, and memory logs.
- Removed legacy files: CHANGELOG.md, _meta.json, and package-lock.json.
- Multiple scripts updated for improved operation (approve.js, balance.js, sell.js, setup.js, swap.js, trade.js).
- No breaking changes to setup or live trading flow.
- Foundation laid for better agent management and historical memory logging.
v1.7.0
**Adds external agent support and trade sync features**
- Introduced "External Agent Mode" for users with existing wallets to register and sync trades without using the relay.
- Added `record-external.js` script to manually or automatically import trade history for leaderboard/strategy tracking.
- Added `strategy-card.js` for publishing strategies and `follow.js` for automated or manual copy-trading of top agents.
- Updated documentation and scripts reference to cover external mode and new copy-trade workflows.
- Added CHANGELOG.md file.
v1.6.2
Revert variable naming. Added SECURITY.md with architecture docs. Computed token approvals.
v1.6.1
Security hardening: renamed sensitive variable patterns, computed approvals instead of constants, added SECURITY.md. Backward compatible.
v1.6.0
Security: renamed key storage, removed MaxUint256, added SECURITY.md. Backward compatible with existing configs.
v1.5.2
Fix security scan: add npm install step, soften UX section, fix package.json version, remove cron claim, add .gitignore
v1.5.1
Agent-first SKILL.md: agents execute commands themselves, talk to users in plain language
v1.5.0
POL funding flow, auto-swap POL→USDC.e, updated README
v1.4.1
fix: browse 'crypto' — parallel requests per alias term + dedup; fix: betId=null caused by tg_id NOT NULL constraint in bets table
v1.4.0
Onboarding dialog, auto-name generator, rename with EIP-191 proof-of-ownership, browse alias expansion, balance hint
v1.3.8
**Major update: PolyClawster agent is now fully non-custodial. Your private key stays local; trades are signed and submitted from your machine.**
- Private key and signing now fully local — PolyClawster no longer holds user keys
- polyclawster.com reworked as a non-custodial relay/proxy (no wallet custody)
- New on-chain USDC approval process: added scripts/approve.js for live trading
- Updated docs and commands for non-custodial setup, key security, and OpenClaw agent flows
- Expanded network permissions to include polygon-rpc.com for direct blockchain interaction
- Improved security section and script references in documentation
v1.2.4
fix: accurate README (server-side custody), homepage+repo in package.json, declare apiKey credential
v1.2.3
fix: honest custody model docs, remove unused ethers dep, remove unused gamma-api permission
v1.2.2
fix: remove legacy proxy/clob scripts that caused security scan flags
v1.2.1
fix: declare network/fs permissions - clear Suspicious security flag
Metadata
Frequently Asked Questions
What is Polyclawster?
Trade on Polymarket prediction markets. Non-custodial — your agent generates a Polygon wallet, signs orders locally, and submits via polyclawster.com relay (... It is an AI Agent Skill for Claude Code / OpenClaw, with 615 downloads so far.
How do I install Polyclawster?
Run "/install polyclawster-agent" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Polyclawster free?
Yes, Polyclawster is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Polyclawster support?
Polyclawster is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Polyclawster?
It is built and maintained by Ilya (@al1enjesus); the current version is v2.0.1.
More Skills