polymarket-skill

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is purpose-aligned for Polymarket trading and mainly uses official Polygon/Polymarket tooling, so it is not confirmed malicious. However, it enables autonomous real-money betting and requires exporting and forwarding a raw private key into an external CLI, creating substantial operational and credential-handling risk.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Sep 14, 2026, 05:55 PM
Package URL
pkg:socket/skills-sh/0xpolygon%2Fpolygon-agent-cli%2Fpolymarket-skill%2F@ab10f48dfed584d3ce28c190d9bb39bebcfccb0e7a4b1629ba6d818786994416