← Back to Skills Marketplace
904
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install polymarket-pro
Description
Use the official Polymarket CLI to browse markets, trade on CLOB, manage positions, and analyze on-chain data. Features include market search, order book ana...
Usage Guidance
This skill appears to be a wrapper for the Polymarket CLI and will ask you to provide a wallet private key to place trades. Before installing or running it: 1) Verify the upstream project: inspect the GitHub repo and the install script (do not run curl|sh blindly). 2) Prefer read-only operations first (market/list, order-book) and avoid supplying your private key until you audit the CLI. 3) If you must trade, consider using a hardware wallet or an account with limited funds; avoid storing your main private key in plaintext env vars or in ~/.config files. 4) Be cautious about running the provided curl | sh installer — pull the repo and review the script locally, or install from an audited package. 5) Note the SKILL metadata does not declare the private-key env var; treat that as a red flag and require the skill owner to clarify required credentials and their handling. If you plan to allow autonomous agent execution, do not provide any private key to the environment — autonomous invocation plus secret access would greatly increase risk.
Capability Analysis
Type: OpenClaw Skill
Name: polymarket-pro
Version: 1.0.0
The skill is classified as suspicious primarily due to its reliance on `curl -sSL ... | sh` for installation of the `polymarket` CLI, which introduces a significant supply chain vulnerability. While this is a common installation pattern, it allows for arbitrary code execution if the remote script at `https://raw.githubusercontent.com/Polymarket/polymarket-cli/main/install.sh` were compromised. Additionally, the skill inherently deals with high-risk operations such as managing cryptocurrency private keys, API keys, and performing financial transactions on a prediction market, as detailed throughout `SKILL.md`. Although these operations are described as legitimate functionalities, their sensitive nature, combined with the risky installation method, warrants a 'suspicious' classification rather than 'benign' due to the potential for exploitation, even without clear evidence of intentional malicious behavior by the skill author.
Capability Assessment
Purpose & Capability
The name/description (Polymarket CLI operations) match the runtime instructions: market browsing, CLOB trading, and on-chain data are all implemented as CLI commands. However, the registry metadata lists no required env vars or credentials while the SKILL.md explicitly documents three ways to supply a private key (CLI flag, POLYMARKET_PRIVATE_KEY env var, or config file). That metadata/instruction mismatch is inconsistent.
Instruction Scope
SKILL.md instructs the agent/user to create or provide private keys, read/write ~/.config/polymarket/config.json, and run on-chain approval transactions (which will spend gas). It also includes a curl | sh installer which runs remote code locally. The instructions do not attempt to limit or warn about storing sensitive keys in plaintext; they allow methods (env var, config file, CLI flag) that can expose secrets. These behaviors broaden the scope beyond simple read-only market queries.
Install Mechanism
No formal install spec in registry (instruction-only), but SKILL.md recommends two installs: a brew tap pointing at a GitHub repo (reasonable) and a 'curl -sSL https://raw.githubusercontent.com/Polymarket/polymarket-cli/main/install.sh | sh' pattern. Curl|sh from a raw GitHub URL is higher risk because it executes remote script without review; it will write code to disk and may run arbitrary commands. This is proportionate to installing a CLI but still risky and should be audited before use.
Credentials
Trading requires a private key/wallet, and SKILL.md documents POLYMARKET_PRIVATE_KEY, config file, and CLI flag options. Yet the registry metadata declares no required env vars or primary credential. The skill therefore fails to declare a clearly sensitive dependency. Requiring a private key is reasonable for a trading CLI, but it must be declared and the user should be warned about safe key-handling (hardware wallets, avoid plaintext env vars).
Persistence & Privilege
The skill is instruction-only, has no install package in the registry, does not request 'always: true', and does not claim to modify other skills or system-wide agent settings. Autonomous invocation is allowed (platform default), which is normal, but see other concerns about keys and curl|sh.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install polymarket-pro - After installation, invoke the skill by name or use
/polymarket-pro - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of polymarket-pro: advanced CLI for Polymarket trading and analysis.
- Browse, search, and analyze Polymarket markets and events using the official CLI.
- Execute trades on the order book: support for limit/market orders and order management.
- Manage wallet addresses, balances, approvals, and portfolio positions.
- Access on-chain data, including trade history, open interest, volume, and leaderboards.
- Perform advanced Conditional Token Framework (CTF) operations: split, merge, redeem tokens.
- Interactive shell for streamlined research and trading workflows.
Metadata
Frequently Asked Questions
What is polymarket-pro?
Use the official Polymarket CLI to browse markets, trade on CLOB, manage positions, and analyze on-chain data. Features include market search, order book ana... It is an AI Agent Skill for Claude Code / OpenClaw, with 904 downloads so far.
How do I install polymarket-pro?
Run "/install polymarket-pro" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is polymarket-pro free?
Yes, polymarket-pro is completely free (open-source). You can download, install and use it at no cost.
Which platforms does polymarket-pro support?
polymarket-pro is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created polymarket-pro?
It is built and maintained by liwagu (@liwagu); the current version is v1.0.0.
More Skills