openclaw-polymarket-trading-bot

SUSPICIOUS. The skill is internally aligned with a trading-bot purpose, and the flagged scanner findings are mostly documentation artifacts, but it enables autonomous financial trading, requires a raw wallet private key plus exchange credentials, and is installed from a repo whose ownership does not clearly match the named publisher. High security risk comes from real-money automation and secret exposure, not from confirmed malware behavior.