polymarket-openclaw-trading-bot
Fail
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to clone a repository from
github.com/Predictly-MCP-Labs/polymarket-openclaw-ai-btc-arbitrage-trading-bot.git. This source does not originate from a recognized trusted organization. - [REMOTE_CODE_EXECUTION]: The instructions include running
npm installandnpm starton the downloaded content, which executes code from the unverified external source on the local machine. - [CREDENTIALS_UNSAFE]: The skill requires the configuration of a
POLYMARKET_PRIVATE_KEYin an environment file. This key is used by the external code to perform sensitive signing operations on the Polygon network. - [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands for repository management and application bootstrapping (
git,npm).
Recommendations
- AI detected serious security threats
Audit Metadata