Polymarket Live Bet

Place live bets on Polymarket CLOB with EIP-712 signing on Polygon. Handles USDC.e approval, order submission, and position tracking. Use for Polymarket auto...

Security Scan

The skill's description claims it will execute signed on-chain trades, but the instructions and metadata provide no details, credentials, or install steps — the capability and required access do not match the skill's declared requirements.

Purpose & Capability

The skill says it places signed Polymarket CLOB bets on Polygon (which normally requires wallet private keys or a signing mechanism, RPC endpoints, and token approval flows), but the skill declares no required environment variables, no config paths, and no binaries. That mismatch is inconsistent with the stated purpose.

Instruction Scope

SKILL.md is effectively a stub: it repeats the description and offers no runtime instructions about how signing, approvals, or order submission are performed, and does not state where or how credentials or RPC calls are handled. The instructions are vague and grant the agent broad discretion without constraints.

Install Mechanism

There is no install spec and no code files; as an instruction-only skill this is low-risk from an installation standpoint. However, absence of code also prevents verification of what the skill actually does.

Credentials

A trading/autonomous-betting skill would normally require sensitive environment inputs (wallet private key or signer endpoint, POLYGON_RPC_URL, contract addresses, token allowances). The skill requests none, which is disproportionate and suggests missing or hidden requirements.

Persistence & Privilege

always is false and the skill is user-invocable; it does not request elevated platform persistence. This is appropriate, but combined with the other gaps it does not mitigate concern.

What to consider before installing

This skill claims to execute signed, on-chain bets but provides no code, no declared credentials, and no details about how signing and order submission are performed — that's a red flag. Before installing or using it, ask the publisher for: (1) the full source code or a trustworthy repo link, (2) a clear list of required environment variables (e.g., signer/private key, POLYGON_RPC_URL, contract addresses) and why each is needed, (3) how EIP-712 signing is handled (local signer, hardware wallet, remote signer/relay), and (4) any endpoints the skill will call. Never supply your private key or high-value credentials without reviewing the code and security model. Prefer skills that use a delegated signing flow (hardware wallet or ephemeral key) or explicit, minimal-scoped API credentials, run the skill in a sandbox first, and get an independent audit if you intend to use it with real funds.

Polymarket Live Bet Engine

Place live bets on Polymarket CLOB with EIP-712 signing on Polygon. Handles USDC.e approval, order submission, and position tracking. Use for Polymarket automation, live crypto betting, or prediction market trading.

Usage

Use polymarket-live-bet to get started

Built by RHO Genesis

Part of the RHO autonomous trading fleet. See also: rho-signals, argus-edge, polymarket-scout.