polymarket-clob-client-v2

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s purpose and API/credential usage largely fit a Polymarket trading client, but the install instruction points to a package name that does not match the official Polymarket publisher/package naming. Because this skill also handles a wallet private key and trading API secrets, the package-name mismatch is a significant supply-chain concern. Additionally, the skill supports autonomous real-world trading actions, which raises operational risk even if aligned with purpose.

Confidence: 94%Severity: 82%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:46 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdevtools-skills%2Fpolymarket-clob-client-v2%2F@3539140c0b4ccc1e712e6184f068e2e1383e8abed6624a1761cb0d64fe25dcd8