← 返回 Skills 市场
realfishsam

Molt Pmxt

作者 realfishsam · GitHub ↗ · v1.1.0
cross-platform ⚠ suspicious
1273
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install molt-pmxt
功能描述
Grants the agent real-time access to prediction markets (Polymarket, Kalshi, Limitless) for fact-checking, probability analysis, and order execution.
安全使用建议
Before installing or enabling this skill: 1) Verify the author/source — the registry metadata lacks an owner homepage and does not declare the sensitive environment variables that SKILL.md and the code use. 2) Do not provide high-value private keys — if you must test, use a separate test wallet with minimal funds or read-only / limited-scope API credentials. 3) Ask the maintainer to explain why Kalshi needs an RSA private key and to correct the registry metadata to list required env vars. 4) Review the pmxtjs dependency (maintainer, recent versions) and ensure your platform runs dependency installation in a controlled environment. 5) Confirm how and where your credentials will be stored by the agent (in-memory vs persisted), and rotate any keys used for testing. 6) If you lack trust in the publisher, run the package in an isolated sandbox or refrain from enabling order-execution capabilities.
功能分析
Type: OpenClaw Skill Name: molt-pmxt Version: 1.1.0 The skill is designed to interact with real-money prediction markets, requiring sensitive credentials (private keys, API keys) via environment variables and enabling financial transactions. While these are inherently high-risk capabilities, the `SKILL.md` explicitly declares these requirements and, crucially, includes a safety instruction for the AI agent to seek explicit user confirmation before executing any `pmxt_order` (trade). The code (`src/tools.ts`) adheres to the stated purpose, making network calls only to the approved prediction market domains (polymarket.com, kalshi.com, limitless.exchange) and processing user input within the bounds of API calls, without evidence of data exfiltration, malicious execution, or prompt injection for unauthorized actions.
能力评估
Purpose & Capability
The skill claims trading and order execution on Polymarket, Kalshi, and Limitless and the SKILL.md and src/tools.ts clearly expect API keys and private keys for these exchanges. However, the registry metadata lists no required environment variables or primary credential — an internal inconsistency that can hide the true privileges the skill needs.
Instruction Scope
SKILL.md instructs the agent to read several sensitive environment variables (private keys, API keys) and to perform network calls to the exchanges (domains are listed). It does not instruct reading unrelated system files. There is a small contradiction in the guidance: it says to "silently check" arbitrage spreads but also says you MUST alert the user when you detect an arbitrage — this should be clarified. Otherwise the runtime instructions generally stay within the stated purpose.
Install Mechanism
No install specification is provided (lower disk-write risk), but the package.json/package-lock are included and declare a dependency on 'pmxtjs'. That dependency is appropriate for the purpose, but users should confirm whether the platform will run npm install and where node_modules would be written. No suspicious external download URLs or extract steps are present.
Credentials
SKILL.md requires multiple sensitive credentials (POLYMARKET_PRIVATE_KEY, KALSHI_API_KEY, KALSHI_PRIVATE_KEY (RSA), LIMITLESS_API_KEY, LIMITLESS_PRIVATE_KEY) which are proportionate for an exchange-trading skill — but the registry metadata omitted these entirely. Also the requirement of an "RSA private key" for Kalshi is unusual and should be justified. The mismatch between declared metadata and actual env usage increases risk of unnoticed credential exposure.
Persistence & Privilege
The skill does not request always:true and does not appear to modify other skills or system-wide settings. It initializes exchange clients at module load but does not request permanent platform presence beyond normal skill operation.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install molt-pmxt
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /molt-pmxt 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.0
- Updated skill name from "pmxt" to "molt-pmxt" - Changed author to "realfishsam" - Bumped version from 1.0.0 to 1.1.0 - No changes to functionality or instructions; documentation and metadata updates only
v1.0.0
Initial release: real-time prediction market access, probability analysis, and order execution. - Connects to Polymarket, Kalshi, and Limitless for market search, pricing, and trades. - Supports three main functions: market discovery (`pmxt_search`), odds retrieval (`pmxt_quote`), and real-money order placement (`pmxt_order`). - Requires API keys and private keys for trading on supported platforms. - Emphasizes accuracy, clear percentage displays, and checks for arbitrage opportunities automatically. - Includes agent behavioral guidelines for reliable and user-friendly operation.
元数据
Slug molt-pmxt
版本 1.1.0
许可证
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Molt Pmxt 是什么?

Grants the agent real-time access to prediction markets (Polymarket, Kalshi, Limitless) for fact-checking, probability analysis, and order execution. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1273 次。

如何安装 Molt Pmxt?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install molt-pmxt」即可一键安装,无需额外配置。

Molt Pmxt 是免费的吗?

是的,Molt Pmxt 完全免费(开源免费),可自由下载、安装和使用。

Molt Pmxt 支持哪些平台?

Molt Pmxt 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Molt Pmxt?

由 realfishsam(@realfishsam)开发并维护,当前版本 v1.1.0。

💬 留言讨论