polymarket-plugin

Warn

Audited by Socket on May 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

High-risk but not clearly malicious. The skill’s trading and wallet capabilities match its stated Polymarket purpose, and network flows are mostly consistent with official OKX/Polymarket infrastructure. However, it installs an externally released core binary and then uses it with wallet-derived/API credentials and real-money trading actions, which makes the overall skill suspicious and materially risky even with same-org provenance and confirmation safeguards.

Confidence: 90%Severity: 84%
Audit Metadata
Analyzed At
May 8, 2026, 09:17 AM
Package URL
pkg:socket/skills-sh/okx%2Fplugin-store%2Fpolymarket-plugin%2F@1a8b3b26d353bf3b06645355329a98ec75c8b6c3