技能详情(站内镜像,无评论)
作者:AD88 @adlai88
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.20.0
统计:⭐ 21 · 7.4k · 27 current installs · 29 all-time installs
⭐ 21
安装量(当前) 29
🛡 VirusTotal :可疑 · OpenClaw :可疑
Package:adlai88/simmer
安全扫描(ClawHub)
- VirusTotal :可疑
- OpenClaw :可疑
OpenClaw 评估
The skill's instructions ask for sensitive credentials (API key and a WALLET_PRIVATE_KEY) and describe actions that affect real money, but the registry metadata does not declare those credentials or clearly justify them — this mismatch and the financial side-effects merit caution.
目的
The skill's stated purpose (prediction market trading, self-custody wallets, safety rails) is coherent with the documented API usage. However the SKILL.md also describes a managed-wallet mode (server-side signing) and side-effects like auto-redeem that move funds; the registry metadata lists no primary credential or required env vars despite the docs requiring an API key and optional private key. That discrepancy is noteworthy but can be expla…
说明范围
Runtime instructions tell agents to register (obtain an api_key), export SIMMER_API_KEY, and optionally set WALLET_PRIVATE_KEY in the environment for local signing. They also instruct sharing a claim_url with a human to enable real-money trading and note automatic redemption behavior when calling certain endpoints. The instructions therefore access and rely on sensitive secrets and cause automated financial actions — and they require the agent…
安装机制
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by an installer. That minimizes installation risk.
证书
The SKILL.md expects an API key (SIMMER_API_KEY) and optionally WALLET_PRIVATE_KEY (0x...), both highly sensitive. The registry declares no required env vars or primary credential — an inconsistency. Requesting a raw private key in the environment is a high-privilege request and should be explicitly declared and justified in metadata; it is not here.
持久
The skill is not forced-always and uses normal autonomous invocation defaults. That is expected. However combining autonomous invocation with access to wallet private keys or an API key could let the agent perform trades or auto-redeem funds without further human approval — the capability is legitimate for a trading skill but increases risk and should be subject to explicit user controls.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「Simmer」。简介:The best prediction market interface for AI agents. Trade on Polymarket and Kal…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/adlai88/simmer/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
暂无本地缓存内容,可在后台执行详情同步。