Polymarket Analysis

Polymarket 预测市场数据分析助手。自动抓取市场数据、热门榜单、赔率变化、情绪指标，生成结构化分析报告。 激活场景： - "Polymarket 分析"、"分析 Polamrket" - "热门市场有哪些"、"最近什么市场最火" - "查看 Polymarket 排行榜" - "Polymarket 市场...

Before installing or enabling this skill, consider the following: (1) The code contains a hard-coded SkillPay API key and SKILL_ID in scripts/skillpay.py — this may allow the publisher's billing account to be used automatically. (2) analyze.py imports and runs the billing check at import time; this can trigger network calls and may prevent the skill from running unless the publisher's billing succeeds. (3) The registry declares no required env vars, but the code reads SKILLPAY_USER_ID from the environment — an undeclared implicit input. Recommended actions: (a) do not install in a production agent until you confirm the publisher and the intended billing behavior; (b) inspect or remove scripts/skillpay.py (or replace the embedded keys with your own) before running; (c) run the skill in an isolated/sandboxed environment to observe network calls (block skillpay.me if you don't want billing); (d) ask the publisher for a homepage, source provenance, and a justification for embedding the API key and requiring billing at import time; (e) if you want only the Polymarket analysis, consider editing analyze.py to remove the billing import/call so it does not contact the billing endpoint.

Type: OpenClaw Skill Name: shenmeng-polymarket-analysis Version: 1.3.0 The skill is designed to analyze Polymarket prediction market data using official APIs and web scraping. It includes a monetization component (SkillPay) in `scripts/skillpay.py` and `scripts/analyze.py` to handle usage credits. While `scripts/skillpay.py` contains a hardcoded API key, which is a security bad practice, the documentation in `SKILL.md` explicitly instructs users to replace it with their own, suggesting this is a configuration template rather than a malicious backdoor. No evidence of data exfiltration, unauthorized command execution, or harmful prompt injection was found.