openclaw-polymarket-trading-bot
Fail
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to clone a repository from
https://github.com/Golrypavium/openclaw-polymarket-trading-bot.git. This repository is not associated with the stated author or any known trusted organization.- [REMOTE_CODE_EXECUTION]: The provided instructions require executing the downloaded code vianpm installandnpm start, which runs unverified third-party code on the user's machine.- [CREDENTIALS_UNSAFE]: The bot's configuration requires users to provide aPRIVATE_KEYfor a cryptocurrency wallet, which grants full control over funds, alongside Polymarket CLOB API secrets and OpenAI API keys.
Recommendations
- AI detected serious security threats
Audit Metadata