← 返回 Skills 市场
al1enjesus

Polyclawster

作者 Ilya · GitHub ↗ · v2.0.1 · MIT-0
cross-platform ⚠ suspicious
615
总下载
1
收藏
1
当前安装
26
版本数
在 OpenClaw 中安装
/install polyclawster-agent
功能描述
Trade on Polymarket prediction markets. Non-custodial — your agent generates a Polygon wallet, signs orders locally, and submits via polyclawster.com relay (...
安全使用建议
This skill appears to do what it says, but before installing consider: (1) It generates and stores a private key and CLOB credentials in ~/.polyclawster/config.json — ensure you trust the code and secure that file (restrict permissions). (2) The skill will call polyclawster.com and Polymarket/Polygon RPC endpoints and will submit signed orders via the relay — verify you trust polyclawster.com as a relay. (3) Approvals/allowances are large by default (approve.js sets a very large USDC spending cap) — review and, if desired, reduce the allowance or revoke it after trades. (4) Start in demo mode and fund with a small amount first; review setup.js and the functions that implement httpGet/postJSON/loadConfig to confirm config handling; if you need higher assurance, inspect setup.js (not shown in full) to ensure it does not transmit private keys. (5) npm install pulls standard libraries (ethers, clob client); only install if you trust the upstream code/repository provenance.
功能分析
Type: OpenClaw Skill Name: polyclawster-agent Version: 2.0.1 The skill is a Polymarket trading bot that manages a local Polygon wallet and uses a third-party relay (polyclawster.com) for geo-bypass and transaction submission. While the documentation is extensive and the logic appears consistent with its stated purpose, the code in scripts/setup.js and scripts/trade.js employs minor obfuscation (string replacement like 'agentKey'.replace('agent', 'private')) to hide the access of the 'privateKey' property from static analysis. Handling raw private keys and routing signed transactions through a centralized relay (polyclawster.com) introduces significant security risks, although no clear evidence of intentional key exfiltration was found.
能力评估
Purpose & Capability
Name/description (Polyclawster, non-custodial Polymarket trading) align with what the package ships: node scripts for setup, trade, swap, approvals, monitoring, and an npm install for ethers and clob-client. Required binary is node and network hosts are Polyclawster/Polymarket/Polygon RPC — all expected for this purpose.
Instruction Scope
SKILL.md and scripts instruct the agent to create a local wallet and store config at ~/.polyclawster/config.json (private key + CLOB creds), run npm install --production, call polyclawster.com and Polymarket/clob endpoints, and optionally run autonomous trading (auto.js). These actions are in-scope for a trading agent, but they do include writing a local file with secret material and making network calls to the relay and APIs — user should be aware of where secrets are stored and which hosts are contacted.
Install Mechanism
Install is an npm install --production of dependencies declared in package.json (ethers, @polymarket/clob-client, oauth-1.0a). This is a normal package registry install from npm (no arbitrary download URLs or extracts).
Credentials
The skill asks for no environment variables and only requires node. It does read/write ~/.polyclawster/config.json to store the private key and CLOB API credentials. That is proportional to the stated non-custodial design but represents sensitive local secret storage that the user must accept.
Persistence & Privilege
The skill writes a config file under the user's home (~/.polyclawster/config.json) and can run autonomous trading (auto.js) when invoked by the agent. always:false (default) and no system-wide modifications are requested. Persistence is limited to the skill's config file, which is expected but worth highlighting as it contains the private key and creds.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install polyclawster-agent
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /polyclawster-agent 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.0.1
polyclawster-agent 2.0.1 - Updated core scripts: balance.js, monitor.js, and swap.js. - package.json updated (likely dependency or metadata adjustments). - Improvements and refinements for trading, balance checking, and swap logic. - Bug fixes and minor enhancements across trading scripts.
v2.0.0
polyclawster-agent v2.0.0 - Major update across 11 files, including core trading, balance, setup, approval, and automation scripts. - Improved agent setup and registration flow for easier onboarding. - Enhanced reliability and clarity in trading, swap, and approval operations. - Scripts reorganized and updated for more robust, user-friendly automation and error handling. - Full feature and script reference updated in documentation for a clearer overview.
v1.9.2
- Cleanup release: removed unused scripts and external protocol documentation. - Deleted 6 legacy files, including batch status scripts and EXTERNAL_AGENT_PROTOCOL.md. - Core trading and setup scripts updated and retained; no user-facing features changed. - Reduces codebase size and streamlines maintenance, with no impact on current user workflows.
v1.9.1
Version 1.9.1 introduces new monitoring and strategy scripts, removes unused documentation and legacy scripts, and adds protocol documentation. - Added new scripts: batch-monitor.js, hourly-status.js, news-dryrun-cron.js, record-external.js, and strategy-card.js for expanded automation and monitoring. - Added EXTERNAL_AGENT_PROTOCOL.md for improved integration and agent protocol documentation. - Removed multiple legacy documentation files and deprecated scripts to streamline the codebase. - Updated core files (README.md, package.json) for accuracy and consistency with new features.
v1.9.0
- Major cleanup: removed 45 outdated files, including documentation, configs, and legacy memory content. - Core functionality and scripts remain unchanged. - Project directory is now leaner and easier to maintain.
v1.8.0
polyclawster-agent v1.8.0 - Major documentation update: many new markdown docs added for agents, bootstrap, heartbeat, keys, soul, tools, users, growth plans, and memory logs. - Removed legacy files: CHANGELOG.md, _meta.json, and package-lock.json. - Multiple scripts updated for improved operation (approve.js, balance.js, sell.js, setup.js, swap.js, trade.js). - No breaking changes to setup or live trading flow. - Foundation laid for better agent management and historical memory logging.
v1.7.0
**Adds external agent support and trade sync features** - Introduced "External Agent Mode" for users with existing wallets to register and sync trades without using the relay. - Added `record-external.js` script to manually or automatically import trade history for leaderboard/strategy tracking. - Added `strategy-card.js` for publishing strategies and `follow.js` for automated or manual copy-trading of top agents. - Updated documentation and scripts reference to cover external mode and new copy-trade workflows. - Added CHANGELOG.md file.
v1.6.2
Revert variable naming. Added SECURITY.md with architecture docs. Computed token approvals.
v1.6.1
Security hardening: renamed sensitive variable patterns, computed approvals instead of constants, added SECURITY.md. Backward compatible.
v1.6.0
Security: renamed key storage, removed MaxUint256, added SECURITY.md. Backward compatible with existing configs.
v1.5.2
Fix security scan: add npm install step, soften UX section, fix package.json version, remove cron claim, add .gitignore
v1.5.1
Agent-first SKILL.md: agents execute commands themselves, talk to users in plain language
v1.5.0
POL funding flow, auto-swap POL→USDC.e, updated README
v1.4.1
fix: browse 'crypto' — parallel requests per alias term + dedup; fix: betId=null caused by tg_id NOT NULL constraint in bets table
v1.4.0
Onboarding dialog, auto-name generator, rename with EIP-191 proof-of-ownership, browse alias expansion, balance hint
v1.3.8
**Major update: PolyClawster agent is now fully non-custodial. Your private key stays local; trades are signed and submitted from your machine.** - Private key and signing now fully local — PolyClawster no longer holds user keys - polyclawster.com reworked as a non-custodial relay/proxy (no wallet custody) - New on-chain USDC approval process: added scripts/approve.js for live trading - Updated docs and commands for non-custodial setup, key security, and OpenClaw agent flows - Expanded network permissions to include polygon-rpc.com for direct blockchain interaction - Improved security section and script references in documentation
v1.2.4
fix: accurate README (server-side custody), homepage+repo in package.json, declare apiKey credential
v1.2.3
fix: honest custody model docs, remove unused ethers dep, remove unused gamma-api permission
v1.2.2
fix: remove legacy proxy/clob scripts that caused security scan flags
v1.2.1
fix: declare network/fs permissions - clear Suspicious security flag
元数据
Slug polyclawster-agent
版本 2.0.1
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 26
常见问题

Polyclawster 是什么?

Trade on Polymarket prediction markets. Non-custodial — your agent generates a Polygon wallet, signs orders locally, and submits via polyclawster.com relay (... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 615 次。

如何安装 Polyclawster?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install polyclawster-agent」即可一键安装,无需额外配置。

Polyclawster 是免费的吗?

是的,Polyclawster 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Polyclawster 支持哪些平台?

Polyclawster 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Polyclawster?

由 Ilya(@al1enjesus)开发并维护,当前版本 v2.0.1。

💬 留言讨论