← 返回 Skills 市场
904
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install polymarket-pro
功能描述
Use the official Polymarket CLI to browse markets, trade on CLOB, manage positions, and analyze on-chain data. Features include market search, order book ana...
安全使用建议
This skill appears to be a wrapper for the Polymarket CLI and will ask you to provide a wallet private key to place trades. Before installing or running it: 1) Verify the upstream project: inspect the GitHub repo and the install script (do not run curl|sh blindly). 2) Prefer read-only operations first (market/list, order-book) and avoid supplying your private key until you audit the CLI. 3) If you must trade, consider using a hardware wallet or an account with limited funds; avoid storing your main private key in plaintext env vars or in ~/.config files. 4) Be cautious about running the provided curl | sh installer — pull the repo and review the script locally, or install from an audited package. 5) Note the SKILL metadata does not declare the private-key env var; treat that as a red flag and require the skill owner to clarify required credentials and their handling. If you plan to allow autonomous agent execution, do not provide any private key to the environment — autonomous invocation plus secret access would greatly increase risk.
功能分析
Type: OpenClaw Skill
Name: polymarket-pro
Version: 1.0.0
The skill is classified as suspicious primarily due to its reliance on `curl -sSL ... | sh` for installation of the `polymarket` CLI, which introduces a significant supply chain vulnerability. While this is a common installation pattern, it allows for arbitrary code execution if the remote script at `https://raw.githubusercontent.com/Polymarket/polymarket-cli/main/install.sh` were compromised. Additionally, the skill inherently deals with high-risk operations such as managing cryptocurrency private keys, API keys, and performing financial transactions on a prediction market, as detailed throughout `SKILL.md`. Although these operations are described as legitimate functionalities, their sensitive nature, combined with the risky installation method, warrants a 'suspicious' classification rather than 'benign' due to the potential for exploitation, even without clear evidence of intentional malicious behavior by the skill author.
能力评估
Purpose & Capability
The name/description (Polymarket CLI operations) match the runtime instructions: market browsing, CLOB trading, and on-chain data are all implemented as CLI commands. However, the registry metadata lists no required env vars or credentials while the SKILL.md explicitly documents three ways to supply a private key (CLI flag, POLYMARKET_PRIVATE_KEY env var, or config file). That metadata/instruction mismatch is inconsistent.
Instruction Scope
SKILL.md instructs the agent/user to create or provide private keys, read/write ~/.config/polymarket/config.json, and run on-chain approval transactions (which will spend gas). It also includes a curl | sh installer which runs remote code locally. The instructions do not attempt to limit or warn about storing sensitive keys in plaintext; they allow methods (env var, config file, CLI flag) that can expose secrets. These behaviors broaden the scope beyond simple read-only market queries.
Install Mechanism
No formal install spec in registry (instruction-only), but SKILL.md recommends two installs: a brew tap pointing at a GitHub repo (reasonable) and a 'curl -sSL https://raw.githubusercontent.com/Polymarket/polymarket-cli/main/install.sh | sh' pattern. Curl|sh from a raw GitHub URL is higher risk because it executes remote script without review; it will write code to disk and may run arbitrary commands. This is proportionate to installing a CLI but still risky and should be audited before use.
Credentials
Trading requires a private key/wallet, and SKILL.md documents POLYMARKET_PRIVATE_KEY, config file, and CLI flag options. Yet the registry metadata declares no required env vars or primary credential. The skill therefore fails to declare a clearly sensitive dependency. Requiring a private key is reasonable for a trading CLI, but it must be declared and the user should be warned about safe key-handling (hardware wallets, avoid plaintext env vars).
Persistence & Privilege
The skill is instruction-only, has no install package in the registry, does not request 'always: true', and does not claim to modify other skills or system-wide agent settings. Autonomous invocation is allowed (platform default), which is normal, but see other concerns about keys and curl|sh.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install polymarket-pro - 安装完成后，直接呼叫该 Skill 的名称或使用
/polymarket-pro触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of polymarket-pro: advanced CLI for Polymarket trading and analysis.
- Browse, search, and analyze Polymarket markets and events using the official CLI.
- Execute trades on the order book: support for limit/market orders and order management.
- Manage wallet addresses, balances, approvals, and portfolio positions.
- Access on-chain data, including trade history, open interest, volume, and leaderboards.
- Perform advanced Conditional Token Framework (CTF) operations: split, merge, redeem tokens.
- Interactive shell for streamlined research and trading workflows.
元数据
常见问题
polymarket-pro 是什么？
Use the official Polymarket CLI to browse markets, trade on CLOB, manage positions, and analyze on-chain data. Features include market search, order book ana... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 904 次。
如何安装 polymarket-pro？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install polymarket-pro」即可一键安装，无需额外配置。
polymarket-pro 是免费的吗？
是的，polymarket-pro 完全免费（开源免费），可自由下载、安装和使用。
polymarket-pro 支持哪些平台？
polymarket-pro 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 polymarket-pro？
由 liwagu（@liwagu）开发并维护，当前版本 v1.0.0。
推荐 Skills