Polymarket OpenClaw Trader
Security checks across malware telemetry and agentic risk
Overview
The skill is transparent about managing a Polymarket trading bot, but it deserves review because it can run live automated trading with a wallet key as a persistent background process.
Install only if you intentionally want an agent to operate a Polymarket trading project. Use paper mode first, inspect the separate bot code and dependencies, use a dedicated low-balance wallet, define strict order and loss limits, and require explicit approval before live trading, auto-restarts, production deployment, or committing persistent changes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.