polymarket-arbitrage-trading-bot
Warn
Audited by Snyk on Sep 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (medium risk: 0.30). The repository clone URL uses an individual GitHub username (
apechurch) rather than an established enterprise organization, creating an unverifiable external runtime dependency tier.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill documentation explicitly provides a trading bot for Polymarket prediction markets, including code and configuration for executing real market orders via the official
@polymarket/clob-clientusing private keys and crypto wallets. This represents a direct financial execution capability (market orders/crypto trading).
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata