polymarket-arbitrage-trading-bot

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent as a Polymarket trading bot and routes data to expected Polymarket endpoints, but it enables autonomous financial trades with a raw private key and is published by ara.so while sourcing code from a third-party repo. This is not confirmed malware, but it is a high-impact skill that should only be used with strong trust in the repo and explicit user approval for live trading.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Sep 14, 2026, 10:38 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Ftrending-skills%2Fpolymarket-arbitrage-trading-bot%2F@4411b85a2ae580eb09840c2945107274e4145523714785f0baedd1184e562e74