polymarket-openclaw-trading-bot
Fail
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to clone a repository from 'https://github.com/Predictly-MCP-Labs/polymarket-openclaw-ai-btc-arbitrage-trading-bot.git', which is an unverified third-party source not recognized as a trusted organization or well-known service.
- [REMOTE_CODE_EXECUTION]: The documentation instructs users to run 'npm install' and 'npm start' on the cloned repository, facilitating the execution of third-party code from an untrusted source.
- [INDIRECT_PROMPT_INJECTION]: The bot is designed to ingest market data from Polymarket APIs to determine autonomous trading actions, creating an attack surface where manipulated external data could influence financial transactions.
- Ingestion points: Market metadata and token prices are fetched from the Gamma and CLOB APIs (referenced in 'src/services/gamma.ts' and 'src/trade/prices.ts').
- Boundary markers: No explicit delimiters or instructions to isolate external inputs are provided in the instructions.
- Capability inventory: The skill uses sensitive capabilities including signing transactions with a private key and placing orders via the '@polymarket/clob-client'.
- Sanitization: No input validation or sanitization mechanisms for the external API data are described in the snippets.
Recommendations
- AI detected serious security threats
Audit Metadata