Polymarket Arb Scanner Pro

Scans top Polymarket markets for pure arbitrage where YES + NO < $0.94, enabling risk-free simultaneous Fill-or-Kill trades with liquidity and risk controls.

This skill will attempt to place real trades using a Polygon wallet private key. Before installing or running: 1) Do not provide your primary wallet private key. Use a dedicated deployment wallet with minimal funds and strict limits. 2) Inspect the py_clob_client (polymarket-clob-client) package source — especially the implementation of create_or_derive_api_creds() — to verify it does not send your raw private key to an external server. 3) Confirm SKILL.md claims (SQS integration) match the code; if you need automated execution, ask the author for details or code for the SQS integration. 4) Run the script in dry-run mode first (--buy omitted) and review network calls (e.g., via a proxy) to confirm only expected endpoints (gamma-api.polymarket.com, clob.polymarket.com) are contacted. 5) If you plan to execute trades, consider hardware signers or separate signer services rather than embedding raw keys in .env, and review/limit the wallet's on-chain allowance. Given the missing metadata and the sensitivity of the key usage, proceed only after code and dependency review or treat this as untrusted code.

Type: OpenClaw Skill Name: polymarket-arb-scanner-pro Version: 1.0.0 The bundle provides a Polymarket arbitrage tool that requires a high-risk Polygon PRIVATE_KEY to execute trades, which is a significant security risk. While the code in arb_scanner.py aligns with the stated arbitrage strategy and lacks clear evidence of exfiltration, the requirement for raw private keys and the execution of financial transactions are inherently risky capabilities. Additionally, SKILL.md makes 'guaranteed profit' claims and mentions features like SQS integration and market blacklists that are not present in the provided code, and _meta.json contains a suspicious future-dated timestamp (March 2026).