← 返回 Skills 市场
Polymarket Real Time Trades Stream
作者
Divyasshree
· GitHub ↗
· v1.0.5
· MIT-0
337
总下载
0
收藏
0
当前安装
6
版本数
在 OpenClaw 中安装
/install polymarket-real-time-trades
功能描述
Real-time streaming Polymarket prediction trades on Polygon (matic) with live USD pricing. Subscribe to a live stream of Polymarket prediction market trades...
安全使用建议
This skill appears to be internally consistent and implements exactly what it claims. Before installing: (1) verify the registry entry properly declares BITQUERY_API_KEY (the provided metadata looks malformed), (2) run the script in an isolated environment (virtualenv or container) to limit logging/monitoring exposure, (3) do not print or log the full WebSocket URL anywhere — Bitquery requires the token as ?token= which can be captured by logs or proxies, (4) store BITQUERY_API_KEY in a secure environment variable and restrict who can read it, and (5) be prepared to rotate the API key immediately if you suspect it was exposed. If you want extra assurance, review the script in your environment to confirm it never prints the URL and run network/logging tests in a sandbox to validate that your infrastructure does not inadvertently capture query-strings.
功能分析
Type: OpenClaw Skill
Name: polymarket-real-time-trades
Version: 1.0.5
The skill is a legitimate tool for streaming real-time Polymarket trade data via the Bitquery GraphQL API. The Python script (scripts/stream_polymarket.py) correctly implements the WebSocket subscription and includes extensive documentation (SKILL.md) regarding the inherent security risks of the Bitquery API (which requires the API key in the connection URL). No evidence of data exfiltration, malicious execution, or prompt injection was found; the code is transparent and aligns perfectly with its stated purpose.
能力评估
Purpose & Capability
Name/description, SKILL.md, requirements.txt, and scripts/stream_polymarket.py all consistently implement a Bitquery WebSocket subscription for Polymarket PredictionTrades and only require BITQUERY_API_KEY. The only mismatch is the registry metadata shown as "Required env vars: [object Object]" — SKILL.md declares BITQUERY_API_KEY but the registry entry appears malformed and should be corrected.
Instruction Scope
The runtime instructions are narrowly scoped: set BITQUERY_API_KEY, install gql[websockets], and run the streaming script. The SKILL.md explicitly warns about the token-in-URL behavior and recommends sandboxing and not logging the URL. The script only reads BITQUERY_API_KEY and prints formatted trade events; it does not access unrelated files or external endpoints other than Bitquery.
Install Mechanism
No install spec is provided (instruction-only), which reduces installation risk. A requirements.txt lists gql[websockets], which is appropriate for the script. There are no downloads from untrusted URLs or extract operations in the package.
Credentials
Only BITQUERY_API_KEY is required, which is proportionate to the skill's purpose. Note however the registry metadata appears to not properly declare environment requirements (shows [object Object]) — ensure that BITQUERY_API_KEY is actually registered as the required credential in the registry before installation so installers are prompted for the token and it isn't accidentally omitted or stored incorrectly.
Persistence & Privilege
The skill does not request persistent platform privileges; always:false and no config-paths or ability to modify other skills. The agent may invoke it autonomously by default (normal behavior) but the skill itself does not create persistent system changes.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install polymarket-real-time-trades - 安装完成后，直接呼叫该 Skill 的名称或使用
/polymarket-real-time-trades触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.5
- Updated required credential metadata from the old `credentials` block to the new `requires.env` format in SKILL.md.
- No code or functional changes; metadata only.
- Ensures install prompt for BITQUERY_API_KEY is consistent with updated skill ecosystem standards.
v1.0.4
**Version 1.0.4 Changelog**
- Added formal credentials and trigger_phrases metadata for improved discoverability and install guidance.
- Expanded, clarified, and emphasized critical security warnings about Bitquery API token exposure via WebSocket URL.
- Introduced a detailed Security Checklist section to ensure safe usage and key protection.
- Updated installation/usage instructions for greater clarity and focus on token handling risks.
- Revised, condensed, and standardized language across prerequisites and credential guidance for consistency and security.
v1.0.3
Version 1.0.3
- Clarified that Bitquery streaming token authentication is only supported via WebSocket URL (not headers).
- Added prominent warnings about risk of token exposure in logs, shell history, or IDE history if URL is printed.
- Updated credential section to emphasize URL-only auth, environment variable storage, and key rotation if exposed.
- Reorganized guidance for credential management and security best practices.
- No code changes; documentation improvements only.
v1.0.2
- Expanded triggers and description to explicitly include sports odds, Bitcoin Up/Down, and crypto prediction markets in addition to general Polymarket trades.
- Clarified that the skill covers all Polymarket markets, including new use cases like sports odds and cryptocurrency up/down markets.
- Updated trigger phrases to include "polymarket sports odds", "bitcoin up down", and other relevant real-time Polymarket requests.
- No code or logic changes; documentation/metadata update only.
v1.0.1
No functional changes; documentation clarifications only.
- Updated SKILL.md to clarify credential requirements, especially the need for `BITQUERY_API_KEY` and implications for installers.
- Added more explicit registry guidance about the environment variable.
- Emphasized best practices for API key handling and secret management.
- Improved warnings about accidental API key exposure and added recommendations to rotate keys if exposed.
- Minor rewording and restructuring; no changes to code, dependencies, or behavior.
v1.0.0
Initial release: real-time Polymarket prediction trade streaming on Polygon.
- Streams live Polymarket trades with buyer, seller, amount, collateral in USD, price, and order ID.
- Provides full market metadata, including question title, resolution source, outcome labels, and transaction details.
- Uses Bitquery GraphQL WebSocket subscription; requires BITQUERY_API_KEY passed in the URL.
- Designed for monitoring order flow, whale trades, market activity, and trade-specific filtering.
- Includes install instructions, credential handling tips, and example scripts for quick setup.
元数据
常见问题
Polymarket Real Time Trades Stream 是什么？
Real-time streaming Polymarket prediction trades on Polygon (matic) with live USD pricing. Subscribe to a live stream of Polymarket prediction market trades... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 337 次。
如何安装 Polymarket Real Time Trades Stream？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install polymarket-real-time-trades」即可一键安装，无需额外配置。
Polymarket Real Time Trades Stream 是免费的吗？
是的，Polymarket Real Time Trades Stream 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Polymarket Real Time Trades Stream 支持哪些平台？
Polymarket Real Time Trades Stream 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Polymarket Real Time Trades Stream？
由 Divyasshree（@divyn）开发并维护，当前版本 v1.0.5。
推荐 Skills