← 返回 Skills 市场
hyy2099

Polymarket AutoTrader

作者 hyy2099 · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
400
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install polymarket-autotrader-hyy
功能描述
Auto-trade BTC, ETH, SOL, XRP on Polymarket price prediction markets at 5-minute and 15-minute intervals using RSI, MACD, and EMA signals.
安全使用建议
Key points before installing or running this skill: - Inconsistency to fix: billing.js requires SKILLPAY_API_KEY, but that variable is omitted from some top-level metadata. Ensure you set SKILLPAY_API_KEY and SKILLPAY_USER_ID before running, or the skill will throw an error when it attempts to bill. - Sensitive secret: the skill requires POLYMARKET_PRIVATE_KEY (an Ethereum private key). Only use a wallet with minimal funds and no long-term or high-value holdings. Prefer a throwaway or funded-only-for-tests account when you first run the skill. - Start in safe mode: set DRY_RUN=true and MIN_CONFIDENCE high, test with small MAX_TRADE_USDC and confirm behavior before enabling real orders. - Network calls: the code contacts Binance (price data), gamma-api.polymarket.com (market discovery), clob.polymarket.com (order posting), and skillpay.me (billing). Verify you are comfortable with these endpoints and that skillpay.me is the intended billing provider. - NPM package audit: verify @polymarket/clob-client and ethers versions (and their transitive dependencies) are trustworthy for your environment; consider locking package.json and auditing with npm audit. - Code review: the repository files are present and readable — if you are not comfortable, have a developer review the code paths that sign and send orders and the billing flow. - Operational controls: run in an isolated environment (sandbox or VM) initially, monitor outgoing traffic, and rotate any keys after testing. Consider restricting the private key to an account with only the funds you are willing to risk. If you want, I can: (1) list the exact env vars you must set to run successfully, (2) produce a short checklist for a safe test run (DRY_RUN, tiny budget, logging), or (3) point out the exact lines in the code where SKILLPAY_API_KEY is enforced so you can decide how to adjust configuration.
功能分析
Type: OpenClaw Skill Name: polymarket-autotrader-hyy Version: 1.0.0 The skill requires a highly sensitive 'POLYMARKET_PRIVATE_KEY' to execute trades and implements a mandatory, hardcoded third-party billing system ('skillpay.me') that charges users 0.001 USDT per execution cycle. While the code performs its stated trading functions using legitimate APIs (Binance, Polymarket), the requirement for a raw private key in environment variables and the automated fee extraction mechanism pose significant financial and security risks. The billing logic in 'billing.js' and the main loop in 'trader.js' create a persistent financial drain that may not be fully transparent to the user depending on how the agent manages the environment.
能力评估
Purpose & Capability
The name, description, and code align: the skill fetches market data (Binance public API), computes RSI/MACD/EMA signals, discovers Polymarket markets and places orders via @polymarket/clob-client and ethers. Required binaries (node) and npm dependencies (@polymarket/clob-client, ethers) are proportional to an auto-trader. Billing via SkillPay is consistent with the billing behavior described. One mismatch: the registry-level 'Required env vars' omitted SKILLPAY_API_KEY while the SKILL.md and code require it.
Instruction Scope
SKILL.md instructs running trader.js and setting environment variables; the runtime instructions match the code's actions (fetch Binance, call Polymarket/Gamma APIs, call SkillPay billing, sign orders with a private key). However the top-level metadata (and the registry metadata supplied to OpenClaw) and the SKILL.md table are inconsistent about required env vars: billing.js throws if SKILLPAY_API_KEY is not set, but SKILL.md metadata and the registry required list omitted it in some places — this could cause silent failures or confusion. The skill reads a sensitive POLYMARKET_PRIVATE_KEY from environment (expected for signing but high‑sensitivity). All network endpoints the code uses are explicit (binance.com, gamma-api.polymarket.com, clob.polymarket.com, skillpay.me).
Install Mechanism
Install uses public npm packages (@polymarket/clob-client and ethers). This is an expected, traceable mechanism for a Node-based trading skill (moderate risk typical for npm installs). No arbitrary downloads or extracted archives are used.
Credentials
Requesting an Ethereum private key (POLYMARKET_PRIVATE_KEY) is functionally necessary to sign orders, so it's proportionate to the trading purpose but is high privilege and sensitive. Billing requires SKILLPAY_API_KEY and SKILLPAY_USER_ID; those are proportionate to the described SkillPay billing flow. The problem: the registry metadata (summary at the top of the evaluation) lists only POLYMARKET_PRIVATE_KEY and SKILLPAY_USER_ID as required, but billing.js enforces SKILLPAY_API_KEY; SKILL.md also lists SKILLPAY_API_KEY in its 'Required Environment Variables' table. This inconsistency is risky because a user following only the registry-level requirements may get runtime errors or misconfigure credentials. Optional POLYMARKET_API_* variables are reasonable for higher rate limits. No unrelated secrets or extraneous cloud credentials are requested.
Persistence & Privilege
always:false (default) and the skill does not request system-wide persistence or attempt to modify other skills or agent settings. It only suggests running itself as a persistent process (pm2) which is normal for a daemonized trader. The skill can be invoked autonomously (platform default) but that alone is not being flagged.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install polymarket-autotrader-hyy
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /polymarket-autotrader-hyy 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: 5m/15m BTC/ETH/SOL/XRP auto-trading on Polymarket
元数据
Slug polymarket-autotrader-hyy
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Polymarket AutoTrader 是什么?

Auto-trade BTC, ETH, SOL, XRP on Polymarket price prediction markets at 5-minute and 15-minute intervals using RSI, MACD, and EMA signals. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 400 次。

如何安装 Polymarket AutoTrader?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install polymarket-autotrader-hyy」即可一键安装,无需额外配置。

Polymarket AutoTrader 是免费的吗?

是的,Polymarket AutoTrader 完全免费(开源免费),可自由下载、安装和使用。

Polymarket AutoTrader 支持哪些平台?

Polymarket AutoTrader 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Polymarket AutoTrader?

由 hyy2099(@hyy2099)开发并维护,当前版本 v1.0.0。

💬 留言讨论