polymarket-copy-trading-bot
Warn
Audited by Snyk on Sep 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (medium risk: 0.30). The repository clone URL in the installation guide points to a third-party GitHub repository (Neron888/Polymarket-copy-trading-bot) that provides code and instructions for the skill execution, representing an unofficial operational dependency.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill documentation describes a TypeScript copy trading bot explicitly designed to interact with the Polymarket CLOB API on Polygon. It contains specific components (
TradeExecutor,ClobClient, and wallet private key configurations) that submit actual financial market orders (buying outcome tokens), manage funds via USDC.e, and execute transactions on-chain.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata