Simmer Resolution Tracker

Monitors your Simmer positions for resolutions, logs wins/losses to your trade journal, and automatically redeems winning positions on-chain. Built for Simme...

This skill appears to do what it says, but it requires your Polymarket wallet private key (WALLET_PRIVATE_KEY) which can be used to sign transactions — treat it as highly sensitive. Before installing: (1) audit the simmer-sdk package and consider pinning a known-good version; (2) prefer using POLY_MODE=sim for testing to avoid exposing or using your private key; (3) do not keep other unrelated secrets in .env or ~/.env in the same environment because the script loads those files automatically; (4) limit filesystem permissions on the DATA_DIR (trade_journal.jsonl and related files) and ensure your runtime environment is trusted; (5) if possible, use a more secure signing approach (hardware wallet or ephemeral key) rather than a long-lived plaintext private key in environment variables.

Type: OpenClaw Skill Name: simmer-resolution-tracker Version: 1.1.0 The skill manages sensitive credentials (WALLET_PRIVATE_KEY, SIMMER_API_KEY) to perform on-chain redemptions and send Discord alerts, which are high-risk capabilities. While these actions are aligned with the stated purpose of tracking Polymarket resolutions in resolution_tracker.py, the script's ability to execute financial transactions and its practice of loading environment variables from broad locations like ~/.env warrant a suspicious classification under the provided criteria. No clear evidence of intentional malice, prompt injection, or unauthorized data exfiltration was found.