polymarket-clob-client-v2
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s purpose and API/credential usage largely fit a Polymarket trading client, but the install instruction points to a package name that does not match the official Polymarket publisher/package naming. Because this skill also handles a wallet private key and trading API secrets, the package-name mismatch is a significant supply-chain concern. Additionally, the skill supports autonomous real-world trading actions, which raises operational risk even if aligned with purpose.
Confidence: 94%Severity: 82%
Audit Metadata