Storyclaw Polymarket Trading

Self-evolving Polymarket trading bot. Design strategy with user, run paper trading, auto-improve until edge target met, then ask to switch to live.

Key things to check before installing or using this skill: - Credentials: Inspect the setup and load_config logic. The metadata declares POLYMARKET_PRIVATE_KEY but most scripts expect credentials/{USER_ID}.json. Don't blindly paste your private key into the environment or a file until you confirm which path the code will actually read. Prefer creating a per-user credentials file with restricted permissions (the code sets 0600 when saving). - Keep it dry: The skill defaults to dry-run, and SKILL.md states never to go live without explicit confirmation. Use dry runs and review recorded performance (state/*.perf.json) before any live activation. - Crontab changes: SKILL.md contains shell snippets that append cron jobs to your crontab. Those commands will alter your system crontab if you run them. Only install cron entries you understand and verify the exact command and paths. Consider running scheduled jobs under a restricted user or via a container instead. - Undeclared dependency: The scripts call 'openclaw notify' for notifications but 'openclaw' is not listed as a required binary. Verify what 'openclaw' does in your environment or remove those calls if you don't want external notifications. - Network endpoints: The code contacts gamma-api.polymarket.com and clob.polymarket.com (Polymarket-related endpoints). Confirm those are the expected endpoints. If you need to audit network traffic, run the code in a controlled environment (container, VM) and monitor outbound requests. - Review setup flow: The truncated setup code may derive and store API keys/secrets locally. Inspect the full setup routine to ensure it does not transmit your private key or derived secrets to any unexpected remote server. - Least privilege & backups: Only give the minimum credentials required for testing (consider a funded test account / small balance). Keep backups of your private key and revoke/rotate keys if you suspect misuse. - If unsure, run the scripts locally in an isolated environment (Docker/VM) and step through 'check' and 'fast' commands before enabling any cron or live trading. If you want, provide the missing setup.py/truncated parts for a deeper review.

Type: OpenClaw Skill Name: storyclaw-polymarket-trading Version: 0.1.0 The skill bundle implements a functional Polymarket trading bot with support for both dry-run (simulated) and live trading. It includes comprehensive logic for market scanning (market_scanner.py), signal analysis (signals.py), and automated strategy improvement (strategy_manager.py). While the bot handles sensitive information like private keys and modifies system crontabs for scheduling, these actions are transparently documented in SKILL.md and are necessary for the stated purpose; the code also includes security best practices such as restricted file permissions (0o600) for credential storage in polymarket.py.