Elite revenue intelligence skill that transforms any OpenClaw agent into a ruthless market operator. Detects asymmetric opportunities before the crowd, build...
Security Analysis
high confidenceThe skill's requests and runtime instructions are coherent with its stated purpose (automated signal generation and Telegram publishing) and do not ask for unrelated credentials or risky installs.
Name/description (automated revenue intelligence, Telegram publishing) align with required env vars (TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID, OWNER_CHAT_ID, PUBLIC_CHANNEL_ID, VIP_CHANNEL_ID), workspace read/write paths, and declared network targets (Polymarket, Telegram, Reddit). No unrelated cloud credentials or binaries are requested.
SKILL.md directs the agent to read/write only workspace paths declared in metadata and to call the Telegram Bot API and public market APIs. It also instructs fallback web searches limited to public financial data sources. This is within the described scope, but the skill gives the agent broad autonomy to make network requests and publish to public channels — the user should be aware the agent will post content automatically and ensure content/publishing policies are acceptable.
No install spec and no code files — instruction-only skill. There is nothing downloaded or written by an installer, which minimizes installation risk.
Requested environment variables are all Telegram/channel identifiers and the bot token, which are proportionate to the skill's behavior (posting to public and VIP Telegram channels). The primaryEnv is the Telegram bot token as expected. No unrelated secrets or cloud credentials are requested.
The skill is designed for autonomous scheduled runs (cron jobs) and will write to workspace memory and tracking files. It does not request always:true or modify other skills' configs. Because it posts to public channels and runs autonomously, users should consider the legal/operational implications of automated trading signals and public publishing.
Guidance
This skill appears internally consistent: it needs only a Telegram bot token and channel IDs and writes to its own workspace files. Before installing, verify you want an agent that will autonomously publish signals to public and VIP channels. Keep the TELEGRAM_BOT_TOKEN private and scoped to a bot account you control; test the skill in a staging workspace and sandboxed Telegram channels first. Review companion skills (polymarket-executor, crypto-sniper-oracle, etc.) before giving them access. Finally, consider legal and compliance risks of publishing financial trading signals automatically (market manipulation, advice regulations) and ensure the content and timing policies meet your obligations.
Latest Release
v1.0.3
No user-facing changes detected in this version. - No file or documentation updates present in this release. - Version and core functionality remain unchanged.
More by @georges91560
Published by @georges91560 on ClawHub
