polymarket-openclaw-ai-trading-bot

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The trading behavior matches the stated purpose and official Polymarket endpoints are used, so this is not clearly malicious. However, it is a high-risk skill because it enables autonomous real-money trading, uses sensitive wallet credentials, includes an optional arbitrary third-party HTTP decision service, and its publisher-to-repo trust chain is not cleanly verifiable from the supplied source.

Confidence: 91%Severity: 76%
Audit Metadata
Analyzed At
Sep 12, 2026, 06:51 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fhermes-skills%2Fpolymarket-openclaw-ai-trading-bot%2F@8dd3074a028f8a94a53b7445571788537cff97bd6cbe70805e8c292c4ca88e7d