Back to skill
Skillv1.0.0
VirusTotal security
PolyGuard Martin Pro · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:15 AM
- Hash
- 608b4a6d76d0123686536abdd9fa85ebf5af8f935ec504fb7bbe11edbdc82bf9
- Source
- palm
- Verdict
- benign
- Code Insight
- Package: PolyGuard Martin Pro (xpi) Version: 1.1.0 Description: Free, open-source Polymarket auto-trading skill. No data collection. The PolyGuard Martin Pro (xpi) version 1.1.0 package is a Polymarket auto-trading skill. The source code has been thoroughly reviewed and found to be benign. It strictly adheres to its stated purpose of automating trades on Polymarket based on user-defined configurations. Key findings: - **No data collection or exfiltration:** The code makes network requests exclusively to `https://api.polymarket.com`, which is the official Polymarket API endpoint. There are no calls to any third-party analytics, telemetry, or unauthorized servers. - **Secure API key handling:** The `api_key` from `config.yaml` is used for authentication (Bearer token) and for HMAC-SHA256 signing of order payloads, both of which are standard practices for interacting with the Polymarket API. The key is never transmitted to any server other than Polymarket's official API. - **Safe configuration loading:** `yaml.safe_load` is used to parse `config.yaml`, mitigating risks associated with arbitrary code execution from YAML files. - **Transparent logic:** The code is straightforward, implementing a polling mechanism to fetch market prices and place orders when configured price conditions are met. There is no obfuscation or hidden functionality. - **Robust error handling:** The script includes error handling for network issues, API failures (e.g., invalid API key, insufficient balance), and malformed responses. The package's claims of being 'Free, open-source', 'No data collection', and 'No hidden backdoors' are fully supported by the code logic. The only external interaction is with the legitimate Polymarket API for trading purposes.
- External report
- View on VirusTotal