📦 polymarket-telegram-picks — 赛事投注推荐
v1.0.0每日自动抓取 Polymarket 体育与赛事赔率，经 AI 模型分析后筛选高价值投注机会，并通过 Telegram 即时推送，让用户不错过最佳下注时机。
0· 342·0 当前·0 累计
by 下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
Key points before installing:
- Metadata mismatch: the skill package metadata declares no required env vars, but SKILL.md and scripts require TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID (or a config/config.json). Ensure you provide these securely (prefer environment variables) and do not commit them to source control.
- Code behavior: the scripts only fetch public Polymarket data and send messages to Telegram using your bot token. They do not exfiltrate other files or credentials. Still, review the ...详细分析 ▾
ℹ 用途与能力
The name/description (fetch Polymarket NBA odds, AI analyze, push to Telegram) match the included scripts: fetch_polymarket.py (fetch), send_telegram.py (push), run_daily.py (orchestration). However the skill registry metadata declares no required env vars/credentials while the code and SKILL.md clearly require TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID — this is an inconsistency in declared requirements.
✓ 指令范围
SKILL.md instructs the agent to run the included fetch and send scripts and to perform AI analysis based on the script output. The scripts themselves only fetch public Polymarket API data and call Telegram's Bot API; they do not read unrelated system files or attempt to transmit data to unexpected endpoints. The SKILL.md and scripts reference the Telegram credentials (env or config) which is within the scope of the described functionality.
✓ 安装机制
This is an instruction-and-script-only skill with no install spec. No external downloads or package installs are requested. Scripts use only Python standard library (urllib, json, subprocess), so installation risk is low.
⚠ 凭证需求
The code legitimately needs TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID to send messages, and SKILL.md documents that. But the registry/metadata lists no required env vars — a mismatched declaration. run_daily.py also looks for OPENAI_API_KEY and POLYMARKET_DAILY_RAW_ONLY environment variables (OPENAI_API_KEY controls an optional local LLM path, POLYMARKET_DAILY_RAW_ONLY toggles behavior). OPENAI_API_KEY is not required for normal operation and no built-in LLM call is implemented in the current scripts, but the presence of these checks is unexpected and should be clarified in metadata and docs before trusting environment config.
✓ 持久化与权限
The skill does not request 'always: true' and does not attempt to modify other skills or system-wide settings. It runs only when invoked (user-invocable or via cron) and its scripts operate within the skill directory.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/9
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install polymarket-telegram-picks
镜像加速npx clawhub@latest install polymarket-telegram-picks --registry https://cn.longxiaskill.com