Polymarket Solana Onchain

Trade Polymarket SOL/crypto prediction markets using live Solana on-chain signals as leading indicators — before price moves. Reads TPS, priority fees, DEX v...

This skill appears to implement what it says (on-chain Solana signals → Polymarket trades), but there are two practical risks you should address before installing: 1) Metadata inconsistency: the top-level registry summary omitted required env vars, but both SKILL.md and clawhub.json require SIMMER_API_KEY. Confirm where and how you must supply that API key and that it will be stored/used safely. 2) Automatic live trading: clawhub.json config schedules the skill to run every 10 minutes and sets the entrypoint to run with --live. If you install this as-is it may place real trades automatically. To be safe: - Test locally with python strategy.py --signals and --dry-run first. - Remove or change the cron / automaton entry so it does not auto-run with --live (or change args to omit --live by default). - Limit SIMMER_ONCHAIN_MAX_POSITION and MAX_TRADES_PER_RUN to small values while testing. - Review the code sections that call the Simmer trade endpoint (search for POST to /api/sdk/trade or similar) so you understand exactly what conditions trigger an order. - Prefer a low-privilege Simmer API key (restricted scopes or limited balance) while you validate behavior. If you want me to, I can scan the remainder of strategy.py (the truncated portion) for the exact trade-execution logic and any unexpected network calls or data exfiltration before you enable live runs.

Type: OpenClaw Skill Name: polymarket-solana-onchain Version: 1.0.0 The skill is a legitimate trading bot designed to execute Polymarket trades based on Solana on-chain metrics (TPS, priority fees, and Jupiter DEX volume). The implementation in strategy.py uses standard Python libraries (urllib) to fetch data from public Solana RPCs and the Jupiter API, and utilizes the Simmer SDK for market interaction. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found; the code logic is transparent and aligns perfectly with the stated purpose in SKILL.md.