← 返回 Skills 市场
108
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install polymarket-mean-reversion-pro
功能描述
Generates zero-false mean reversion signals on Polymarket using 4σ price moves with RSI, MACD divergence, ATR compression, and VPIN flow filters.
安全使用建议
Do not run this skill with real secrets or on machines that have AWS credentials or live wallets until you resolve the inconsistencies. Specific things to check before installing or running: 1) Ask the author why TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID, and SQS_QUEUE_URL are hard-coded in the script; these send data to a third party by default and should be replaced with your own endpoints. 2) Confirm whether the skill needs your PRIVATE_KEY locally — if execution is done by an external pipeline, you should not provide your private key to this script. 3) If you must test, run in an isolated environment with no AWS credentials and without your real wallet keys; use test tokens and your own Telegram bot and SQS queue. 4) Prefer forks that remove hard-coded tokens and require the user to opt into external queues, and consider having the skill log only locally rather than pushing to third-party queues. 5) If you already put secrets into .env and are concerned, rotate those keys (wallet private key, Telegram bot token, AWS creds) immediately. If you want, provide the remaining portion of mean_reversion.py for a complete review to see whether any secrets are ever included in messages pushed to SQS or Telegram.
功能分析
Type: OpenClaw Skill
Name: polymarket-mean-reversion-pro
Version: 1.0.0
The script mean_reversion.py contains hardcoded remote endpoints that exfiltrate trading signals and market activity to developer-controlled infrastructure. Specifically, it includes a hardcoded AWS SQS queue URL (account 291215835256) and Telegram bot credentials (8763627754:AAHGhDCcsuQytONr_i5VG335VS7q4zMAtQk) that are used to 'phone home' with trade details, sizes, and market IDs. While the script performs the described technical analysis, these hardcoded exfiltration points allow the author to monitor user trading activity and financial intent without explicit consent, which is highly irregular for a local trading tool.
能力评估
Purpose & Capability
The skill's name/description (mean-reversion signals for Polymarket) aligns with the code (market fetch, indicators, signal logic, Telegram alerts, SQS push). However the registry metadata claims no required env vars while SKILL.md and the code expect wallet credentials and Telegram configuration; boto3 usage implies AWS credentials may be needed but none were declared. This inconsistency is unexpected and unjustified by the stated purpose.
Instruction Scope
SKILL.md instructs users to provide a PRIVATE_KEY and WALLET_ADDRESS (sensitive), and the code will load a local .env file. The runtime instructions also call out SQS integration and Telegram alerts. The code contains hard-coded Telegram bot token/chat and a hard-coded SQS queue URL that will exfiltrate signals to an external account; SKILL.md does not explain or justify sending signals to a third-party-owned SQS queue or why the skill itself would need a private key (vs. an external execution service).
Install Mechanism
This is instruction-only with no external downloads. Required Python libraries are standard (requests, boto3). No high-risk install URLs or archive extraction are present.
Credentials
The skill asks users (in SKILL.md) to set PRIVATE_KEY and WALLET_ADDRESS but the registry declared no required env vars. The code uses boto3 (implying AWS credentials or instance role) but does not require or document them. Worse, it contains hard-coded TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID, and an explicit SQS_QUEUE_URL — meaning signals (and potentially any data assembled by the script) will be sent to a third party unless you override these. Requiring a private key locally in .env is high-risk if the skill does not need to sign transactions locally; the intent is ambiguous.
Persistence & Privilege
always:false and there is no install writing persistent system-wide config beyond a local .mr_history.json state file. The skill can be invoked autonomously (normal), but autonomous invocation increases exposure because the code will call external endpoints (Telegram, SQS) without clear opt-in from the registry metadata.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install polymarket-mean-reversion-pro - 安装完成后，直接呼叫该 Skill 的名称或使用
/polymarket-mean-reversion-pro触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Polymarket Mean Reversion Pro 是什么？
Generates zero-false mean reversion signals on Polymarket using 4σ price moves with RSI, MACD divergence, ATR compression, and VPIN flow filters. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 108 次。
如何安装 Polymarket Mean Reversion Pro？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install polymarket-mean-reversion-pro」即可一键安装，无需额外配置。
Polymarket Mean Reversion Pro 是免费的吗？
是的，Polymarket Mean Reversion Pro 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Polymarket Mean Reversion Pro 支持哪些平台？
Polymarket Mean Reversion Pro 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Polymarket Mean Reversion Pro？
由 Mike（@themsquared）开发并维护，当前版本 v1.0.0。
推荐 Skills