openclaw-polymarket-trading-bot

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs cloning an arbitrary third-party GitHub repository (Golrypavium/openclaw-polymarket-trading-bot) to install and run its bot code, constituting an unverifiable runtime external dependency from an unofficial source.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill provides documentation and code for an automated trading bot that interacts with the Polymarket CLOB (Central Limit Order Book) API. It includes explicit capabilities and functions to submit market buy and sell orders, manage private keys for wallet execution, and place real financial trades (submitBuy, submitSell, createMarketBuyOrder, postOrder). This meets the criteria for Direct Financial Execution Authority (Market Orders).