← 返回 Skills 市场
91
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install polymarket-predictradar-news-impact-skills
功能描述
Breaking news + Polymarket market correlation analysis. Scan today's major news and track its impact on prediction market probabilities, or find all related...
安全使用建议
Before installing or enabling this skill: 1) Confirm that a trusted polymarket-data-layer skill exists in your agent environment and inspect its code (mcp-client/gamma-client) to see what credentials or DB access it exposes. 2) Ask the skill author to declare dependencies and any required credentials (API keys, DB access) explicitly — a skill should not rely on implicit access to another skill's internals. 3) If you enable it, run it in a sandboxed agent or with limited permissions until you verify it only accesses expected Polymarket data endpoints. 4) If you cannot inspect polymarket-data-layer, treat this skill as higher-risk and avoid granting autonomous invocation or broad environment privileges.
功能分析
Type: OpenClaw Skill
Name: polymarket-predictradar-news-impact-skills
Version: 1.0.0
The skill bundle facilitates Polymarket analysis by correlating news events with market data, but it contains a significant SQL injection vulnerability in SKILL.md. The instructions direct the agent to interpolate external data—such as timestamps from web searches ({newsTime}) and market identifiers ({conditionIds})—directly into SQL queries without any sanitization or validation logic. While the capabilities (WebSearch and database access) are aligned with the stated purpose, the lack of input protection for these parameters represents a high-risk vulnerability.
能力评估
Purpose & Capability
The skill's stated goal (map news → Polymarket market impacts) matches the SQL and API-style queries in SKILL.md. However the instructions explicitly require code from a different skill (../../polymarket-data-layer/scripts/mcp-client and gamma-client) while the skill metadata declares no dependency — an undeclared dependency on another skill's internals is an inconsistency.
Instruction Scope
SKILL.md tells the agent to require and use other skill scripts by relative path. That means the agent will attempt to read/execute code outside this skill's own files, which can reveal or reuse secrets, internal client logic, or privileged database access. The instructions also call for WebSearch, Polymarket searches and DB queries; those are fine for the purpose but the file-system access of another skill is scope creep.
Install Mechanism
This is an instruction-only skill with no install spec or downloaded code, so it does not itself install arbitrary binaries — low install risk. The risk comes from runtime interactions with other skills, not from an installer.
Credentials
The skill declares no env vars or credentials, but the mcp/gamma clients it instructs to use almost certainly rely on database/API credentials or tokens (not declared here). That mismatch means the skill assumes implicit access to credentials via the referenced polymarket-data-layer or the agent environment; required secrets are not documented or scoped.
Persistence & Privilege
The skill does not request permanent presence (always:false) and has no install steps that persist artifacts. The main privilege concern is the instruction to load other skill files at runtime, but it does not request to modify other skills or agent-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install polymarket-predictradar-news-impact-skills - 安装完成后，直接呼叫该 Skill 的名称或使用
/polymarket-predictradar-news-impact-skills触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: Scan breaking news and analyze Polymarket market impact.
- Proactively summarizes today's major news and tracks related prediction market probability and volume changes.
- Supports user-provided news queries: matches event news to both directly and indirectly related active markets.
- Filters out settled/closed markets for focused and timely insights.
- Fetches and displays major price shifts and large trades, flagging possible smart money activity.
- Clear output formats for both news-driven market scans and event-specific market correlations.
元数据
常见问题
polymarket-predictradar-news-impact-skills 是什么？
Breaking news + Polymarket market correlation analysis. Scan today's major news and track its impact on prediction market probabilities, or find all related... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 91 次。
如何安装 polymarket-predictradar-news-impact-skills？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install polymarket-predictradar-news-impact-skills」即可一键安装，无需额外配置。
polymarket-predictradar-news-impact-skills 是免费的吗？
是的，polymarket-predictradar-news-impact-skills 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
polymarket-predictradar-news-impact-skills 支持哪些平台？
polymarket-predictradar-news-impact-skills 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 polymarket-predictradar-news-impact-skills？
由 Yeri（@cnica）开发并维护，当前版本 v1.0.0。
推荐 Skills