Polymarket Signal Sniper

Snipe Polymarket opportunities from your own signal sources. Monitors RSS feeds with Trading Agent-grade safeguards.

What to check before installing or enabling this skill: - Metadata mismatch: The registry summary reported no required env vars, but the skill package (clawhub.json and SKILL.md) requires SIMMER_API_KEY and optionally WALLET_PRIVATE_KEY. Confirm which is authoritative before trusting the listing. - Sensitive secrets: This skill supports placing real trades. If you provide WALLET_PRIVATE_KEY (private key), the SDK will sign orders automatically. Prefer using a managed custodial wallet or a limited-scope API key rather than putting an unlocked private key in an environment variable. If you must use a private key, keep it in a secure secret store and rotate it frequently. - Autonomy and safeguards: The code is capable of making live trades. If you don't want autonomous actions, do not run with --live or set up the skill to run automatically, or disable autonomous model invocation/automaton features in your agent. Run in dry-run/scan-only mode first and verify behavior. - Confirm the SDK: Inspect the simmer-sdk package (its source and release channel) before installation. Ensure the package version matches expectations (clawhub.json requests simmer-sdk>=0.11.1). Verify simmer.markets is the legitimate service you intend to use. - Env var and tunable mismatches: The skill's SKILL.md, code, and clawhub.json use slightly different names for some environment variables/tunables. If you set an env var and the skill doesn't see it, it may default to different values. Review the code or run --config to confirm active settings. - Least privilege: Use the smallest API key permissions possible and limit MAX_USD/MAX_TRADES while testing. Consider network isolation/sandbox execution when trialing. - Files written locally: The skill writes a state/processed.json file in its directory. If you run this in a shared environment, ensure the directory's access permissions meet your security needs. If you want a higher-confidence assessment, provide: - The simmer-sdk package source or a link to its official repo/release so I can check what the SDK does when given credentials; and - Clarification which registry metadata (the summary shown vs clawhub.json) is the authoritative manifest so the declared requirements can be reconciled.

Type: OpenClaw Skill Name: polymarket-signal-sniper Version: 1.5.2 The skill is a legitimate trading tool for Polymarket that monitors RSS feeds for signals and executes trades via the Simmer SDK. It includes robust features such as SSRF protection for external requests in signal_sniper.py, file locking for state management, and clear instructions in SKILL.md for the AI agent to handle sensitive credentials (like the WALLET_PRIVATE_KEY) securely via environment variables. The code is well-structured, follows security best practices like atomic file writes and XXE protection attempts, and lacks any indicators of malicious intent or data exfiltration.