← 返回 Skills 市场
prysm96

Polymarket Spread Sniper

作者 PrYsM96 · GitHub ↗ · v1.3.2 · MIT-0
cross-platform ⚠ suspicious
201
总下载
0
收藏
1
当前安装
5
版本数
在 OpenClaw 中安装
/install polymarket-spread-sniper
功能描述
Snipe mispriced Polymarket markets by comparing AMM price vs live CLOB orderbook midpoint. Buys the underpriced side when edge > 3% on liquid markets. Exits...
安全使用建议
This package appears to be a real Polymarket/Simmer spread-arbitrage bot, but review before running live. Specifically: - Do not trust the top-level metadata that lists no required env vars — the code requires SIMMER_API_KEY. Confirm you control the API key and understand what it can do. - Inspect config.json: it sets daily_max_spend to 999,999.00 which overrides the smaller caps described in the README; change this to a safe limit before running --live. - The scripts attempt to auto-load a .env file several directories above the skill (parents[4]/.env) and write logs/state at higher-level paths. That can read unrelated secrets or affect files in your workspace — run in an isolated environment (container or dedicated workspace) or remove/modify the .env loader before use. - There is no explicit install step in the package; ensure simmer-sdk is installed from a trusted source (pip install simmer-sdk) and audit that package as well. - Start in SIM/dry mode and monitor behavior (use --live only after testing). Consider running the bot with limited network access or with a low daily cap to limit potential loss. If you want, I can: (a) point out exact lines to edit to disable the upward .env loader, (b) show how to override the daily cap safely, or (c) produce a checklist to run this safely in a container.
功能分析
Type: OpenClaw Skill Name: polymarket-spread-sniper Version: 1.3.2 The skill is a functional trading bot designed to arbitrage price discrepancies between Polymarket's Automated Market Maker (AMM) and Central Limit Order Book (CLOB). It uses the Simmer SDK to execute trades and track P&L, with logic spread across `spread_sniper.py`, `scripts/spread_pnl.py`, and `scripts/sim_redeem.py`. The code correctly handles sensitive credentials by loading them from environment variables and restricts network activity to legitimate endpoints (polymarket.com and simmer.markets). No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力标签
cryptorequires-walletcan-sign-transactionsrequires-sensitive-credentials
能力评估
Purpose & Capability
The code, SKILL.md, and clawhub.json all describe a spread-arbitrage bot for Polymarket/Simmer and the network calls are consistent with that purpose (Simmer API, Polymarket CLOB and Gamma). However the registry metadata at the top claims 'Required env vars: none' while clawhub.json and the scripts require SIMMER_API_KEY — an inconsistency that could mislead users about required credentials. The presence of simmer-sdk in clawhub.json is coherent with the trading functionality.
Instruction Scope
The runtime instructions instruct running local scripts and setting SIMMER_API_KEY, which is expected. However the code auto-loads a .env file located four directory levels above the script (parents[4] /.env) and writes/reads logs/state files at parent-level paths (e.g., spread_pnl.log, spread_daily.json). This expands the skill's file-scope beyond its own folder and could read user workspace .env files containing unrelated secrets or overwrite top-level logs/state — scope creep that should be reviewed.
Install Mechanism
There is no explicit install spec even though clawhub.json declares a pip dependency (simmer-sdk). That mismatch means a user might run the skill without the required Python package installed and the manifest doesn't provide a vetted install source. The skill does not fetch arbitrary binaries or use suspicious download URLs.
Credentials
The code legitimately requires SIMMER_API_KEY for API access — that is proportionate to a trading bot. But the top-level metadata claims no required env vars while files and clawhub.json require SIMMER_API_KEY. Additionally, config.json in the package sets daily_max_spend to 999999.0 (overriding smaller defaults in SKILL.md and clawhub tunables), which could enable very large live trades if that config is respected. The .env auto-loader may also read other environment values from a workspace .env (potentially exposing unrelated secrets).
Persistence & Privilege
The skill is not set to always:true and autostart is false, so it won't force inclusion. clawhub.json marks the automaton 'managed' with an entrypoint, meaning it is capable of being run/managed by the environment. The skill writes state/log files next to the script or at workspace-level which is normal for a long-running bot but should be accepted consciously by the user.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install polymarket-spread-sniper
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /polymarket-spread-sniper 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.3.2
Fix critical bug: volume_24h=null was filtering all markets (0 candidates). Bot now correctly passes null-volume markets through. No edge found in current conditions — not a bug.
v1.3.1
Update SKILL.md: accurate config table, exit logic docs, P&L tracker usage, file structure
v1.3.0
Fix P&L tracker (sell+redeem as proceeds), improve market filters, take-profit + time-stop exits, resolved P&L via Simmer API, --history flag
v1.2.0
Fix critical edge bug: edge was always negative (was using CLOB ask as entry price). Now correctly uses AMM price as entry and computes edge as CLOB_mid minus AMM_price after 2% fee. Lower default min_spread to 0.005. Fix entry price display.
v1.1.0
Fix critical edge calculation bug: edge was always negative (bought NO at wrong price). Now correctly computes net edge after CLOB entry cost. Only trades when edge > MIN_SPREAD after fees.
元数据
Slug polymarket-spread-sniper
版本 1.3.2
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 5
常见问题

Polymarket Spread Sniper 是什么?

Snipe mispriced Polymarket markets by comparing AMM price vs live CLOB orderbook midpoint. Buys the underpriced side when edge > 3% on liquid markets. Exits... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 201 次。

如何安装 Polymarket Spread Sniper?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install polymarket-spread-sniper」即可一键安装,无需额外配置。

Polymarket Spread Sniper 是免费的吗?

是的,Polymarket Spread Sniper 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Polymarket Spread Sniper 支持哪些平台?

Polymarket Spread Sniper 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Polymarket Spread Sniper?

由 PrYsM96(@prysm96)开发并维护,当前版本 v1.3.2。

💬 留言讨论