polymarket-openclaw-ai-trading-bot

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references an external GitHub repository for cloning during setup, but the dependency gate requires an inbound operational dependency where content is executed or configures behavior, and GitHub repository URLs used for standard source installation are treated as external repository locators; however, evaluating the provenance, Predictly-MCP-Labs is an unofficial/personal-style organization without established first-party enterprise authority, making it an unofficial operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The SKILL.md documentation describes a trading bot ("Polymarket OpenClaw AI Trading Bot") that directly executes market orders on the Polymarket CLOB via TypeScript/Node.js using explicit wallet integration, private keys, and order execution functions (clobClient.postOrder, buyUp, buyDown, sell) to buy and sell prediction market assets.