← 返回 Skills 市场
whh110112

Polymarket BTC 5m Arbitrage

作者 whh110112 · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
364
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install polymarket-btc-5m-arbitrage
功能描述
Polymarket BTC 5分钟高频套利机器人 - 自动交易BTC涨跌预测市场,支持 SkillPay 计费
安全使用建议
Do not run this code unmodified. Specific recommendations: - Treat the hardcoded SKILLPAY_API_KEY value as suspicious; remove any embedded API keys before running and replace with your own keys only if you trust the billing provider. Hardcoded secret keys can be abused to charge users or route payments to the developer. - Be aware the code advertises automatic trading but contains no order-submission logic; if you expect a trading bot, this code is incomplete—do not provide your POLYMARKET_PRIVATE_KEY until you audit or implement secure signing/ordering logic. - If you plan to run it: audit all network calls (requests) and confirm endpoints, remove or replace the embedded billing key, and run in a sandboxed environment or test account with minimal funds. - Ask the publisher for clarity: why do registry metadata and required-env declarations omit POLYMARKET_* and SKILLPAY_* keys, and is the hardcoded billing key intentional? If you cannot get satisfactory answers, avoid installing or using this skill.
功能分析
Type: OpenClaw Skill Name: polymarket-btc-5m-arbitrage Version: 1.0.1 The skill bundle claims to be an automated high-frequency trading bot for Polymarket, but the provided code in `scripts/polymarket_btc_5m_bot.py` only implements market scanning and logging of opportunities, lacking any actual order execution or transaction signing logic. It explicitly requests a highly sensitive `POLYMARKET_PRIVATE_KEY` via environment variables or `config.json` without demonstrating a functional use for it. Furthermore, it integrates a third-party monetization service (`skillpay.me`) with hardcoded developer API keys, which is unusual for open-source skill bundles and may indicate a deceptive 'pay-to-play' scheme for non-functional software.
能力评估
Purpose & Capability
The skill's name/description claim automated trading (orders, market-making), but the provided Python bot only scans markets and logs arbitrage opportunities; there is no code that places orders or interacts with Polymarket order endpoints. Also the registry lists no required environment variables, yet SKILL.md and the code expect POLYMARKET_PRIVATE_KEY and POLYMARKET_API_KEY (for trading) and SKILLPAY_API_KEY (billing). This mismatch suggests the manifest/metadata are incomplete or misleading.
Instruction Scope
SKILL.md instructs users to set private keys and API keys and to run the bot. The code reads .env and environment variables and makes outbound requests to polymarket endpoints and to skillpay.me for billing. It does not attempt to read unrelated local files, but it will use environment-stored private keys if provided (sensible for trading) and will attempt to charge users via SkillPay. The risk: the SKILLPAY usage is automatic and a hardcoded key is present so billing behavior may not be what users expect.
Install Mechanism
No install script or remote downloads; this is an instruction-plus-source package with no networked install steps. That lowers filesystem/remote-exec risk. However, running the included Python scripts will execute network calls in-process (requests) and may perform financial operations if code is changed or extended.
Credentials
The code requires sensitive credentials (POLYMARKET_PRIVATE_KEY and POLYMARKET_API_KEY) appropriate for trading, but the registry declares none—an incoherence. Critically, a SKILLPAY_API_KEY default is hardcoded into two files (looks like a private key string 'sk_...'), meaning the package contains an embedded secret that will be used to bill/charge via skillpay.me if the user does not override it. Embedding a live billing API key in distributed code is a high-risk anti-pattern (financial/exfiltration risk).
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide privileges. It does run continuously (in its own process when executed) but does not modify other skills or agent configs. Autonomous agent invocation is permitted by default but not by itself a concern here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install polymarket-btc-5m-arbitrage
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /polymarket-btc-5m-arbitrage 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Added support for SkillPay billing system (optional): users must pay before accessing, non-paying users are given a payment link, and developers receive 95% of revenue. - Updated documentation to reflect billing option and provide configuration examples for SkillPay. - General improvements to usage instructions and feature descriptions.
元数据
Slug polymarket-btc-5m-arbitrage
版本 1.0.1
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Polymarket BTC 5m Arbitrage 是什么?

Polymarket BTC 5分钟高频套利机器人 - 自动交易BTC涨跌预测市场,支持 SkillPay 计费. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 364 次。

如何安装 Polymarket BTC 5m Arbitrage?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install polymarket-btc-5m-arbitrage」即可一键安装,无需额外配置。

Polymarket BTC 5m Arbitrage 是免费的吗?

是的,Polymarket BTC 5m Arbitrage 完全免费(开源免费),可自由下载、安装和使用。

Polymarket BTC 5m Arbitrage 支持哪些平台?

Polymarket BTC 5m Arbitrage 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Polymarket BTC 5m Arbitrage?

由 whh110112(@whh110112)开发并维护,当前版本 v1.0.1。

💬 留言讨论