← 返回 Skills 市场
woody2434

Polyclaw

作者 woody2434 · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
433
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install polyclaw-2
功能描述
Trade on Polymarket via split + CLOB execution. Browse markets, track positions with P&L, discover hedges via LLM. Polygon/Web3.
安全使用建议
Do not supply a real private key or production funds to this skill as-is. The SKILL.md expects python scripts (scripts/polyclaw.py, etc.) that are not included in the package — you should only install or run this if the skill provides its code or points to a verifiable upstream repository. Ask the publisher for the missing code and for a reproducible install (requirements, Python runtime, and a manifest). Confirm whether OPENROUTER_API_KEY and HTTPS_PROXY are required and why they were omitted from registry metadata. If you test, use a throwaway wallet with tiny balances, inspect all scripts before running them, and verify the brew 'uv' formula source. If the publisher cannot provide source code or a trusted repository, treat the skill as untrusted.
功能分析
Type: OpenClaw Skill Name: polyclaw-2 Version: 0.1.0 The skill requires sensitive credentials, specifically `POLYCLAW_PRIVATE_KEY` and `OPENROUTER_API_KEY`, to be stored as environment variables for its operation. While the `SKILL.md` explicitly warns about the security risks associated with this practice, it represents a significant vulnerability due to the insecure handling and potential exposure of private keys and API keys. No evidence of malicious intent such as data exfiltration, unauthorized remote execution, persistence mechanisms, or prompt injection attempts against the agent was found in the provided files.
能力评估
Purpose & Capability
The stated purpose (trading on Polymarket via Polygon RPC and an EVM private key) matches the declared CHAINSTACK_NODE and POLYCLAW_PRIVATE_KEY requirements. Use of an LLM for hedge-discovery is plausible and the uv binary could be a task runner for the workflow.
Instruction Scope
SKILL.md repeatedly instructs the agent to run python scripts (e.g., scripts/polyclaw.py) and to perform on‑chain approvals and trades, but the skill bundle contains no code files. The instructions reference environment variables beyond those declared in registry metadata (OPENROUTER_API_KEY, HTTPS_PROXY, CLOB_MAX_RETRIES) and assume a 'python' runtime without declaring it. Running the described approval and trading commands would broadcast transactions using the private key supplied in an env var—this is expected for trading but should only occur if you know what code will execute. The absence of the actual scripts is a major mismatch.
Install Mechanism
The only install step is a brew formula for 'uv' which is consistent with the SKILL.md's use of 'uv'. There is no high‑risk remote download in the metadata. However, 'uv' installing via brew is the only installation provided and no mechanism is present to install Python dependencies or the referenced scripts, which is inconsistent.
Credentials
Primary credential POLYCLAW_PRIVATE_KEY and CHAINSTACK_NODE are proportionate to a trading skill. However SKILL.md requires OPENROUTER_API_KEY for LLM-based hedge discovery and suggests HTTPS_PROXY and other runtime settings, yet the registry metadata only declared CHAINSTACK_NODE and POLYCLAW_PRIVATE_KEY. The skill therefore references env vars not declared as required; storing an EVM private key in an env var is convenient but risky — the SKILL.md warns about this, but the missing code increases the risk of unknown key usage or exfiltration.
Persistence & Privilege
The skill is not marked always:true and uses normal autonomous invocation defaults. It does not request system config paths or other skills' credentials.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install polyclaw-2
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /polyclaw-2 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release of polyclaw-2. Key features and usage highlights: - Browse Polymarket markets, view details, and search by keyword. - Trade on Polymarket via split + CLOB execution (YES/NO positions), with support for market hedging. - Manage wallet and contract approvals via environment variable (`POLYCLAW_PRIVATE_KEY`). - Track all positions with entry prices, P&L, and wallet status. - Hedge discovery using LLM-based analysis with multiple output and filtering options. - Includes CLI usage examples, proxy support for CLOB, environment variable setup, and troubleshooting guidance.
元数据
Slug polyclaw-2
版本 0.1.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Polyclaw 是什么?

Trade on Polymarket via split + CLOB execution. Browse markets, track positions with P&L, discover hedges via LLM. Polygon/Web3. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 433 次。

如何安装 Polyclaw?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install polyclaw-2」即可一键安装,无需额外配置。

Polyclaw 是免费的吗?

是的,Polyclaw 完全免费(开源免费),可自由下载、安装和使用。

Polyclaw 支持哪些平台?

Polyclaw 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Polyclaw?

由 woody2434(@woody2434)开发并维护,当前版本 v0.1.0。

💬 留言讨论