Mia Polymarket Trader
SuspiciousAudited by ClawScan on May 10, 2026.
Overview
This skill asks an agent to use a Polymarket API key and wallet private key for autonomous trading, but it provides no reviewed implementation or clear approval and scope controls.
Review carefully before installing. Only consider using this with a dedicated low-balance wallet, a verified `mia-polymarket` implementation, and manual confirmation for every trade; never provide a main wallet private key to an unreviewed trading skill.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A wallet private key can authorize financial actions; if the invoked tool or agent behavior is unsafe, funds or positions could be put at risk.
The skill directs users to expose both an API key and a wallet private key to the trading workflow, while the provided metadata declares no credentials or required environment variables.
export POLYMARKET_API_KEY="your-key" export POLYMARKET_PRIVATE_KEY="your-wallet-key"
Do not use a main wallet private key. Use a dedicated limited wallet, verify exact key permissions, and require the skill metadata to declare credential needs clearly.
The agent could make financial trades that lose money or create unwanted market exposure.
The skill explicitly describes autonomous trading and provides a command to place trades, but does not specify per-trade user approval, hard spending limits, or containment.
AI agent that autonomously trades on Polymarket prediction markets. - Automated trade execution ... mia-polymarket trade --market-id "xxx" --position "yes" --amount 10
Require explicit user confirmation before each trade and document enforceable limits for market scope, maximum amount, daily loss, and emergency stop behavior.
Users cannot tell from the provided artifacts what code would actually receive the private key or execute trades.
The artifacts provide no reviewed implementation or install source, yet the skill tells users to run a `mia-polymarket` command that would handle private keys and trades.
No install spec — this is an instruction-only skill.
Provide a reviewed implementation, pinned install source, required binary declaration, and clear provenance before using this with trading credentials.
Users may trust the agent to limit losses even though the provided artifacts do not demonstrate how those protections work.
The skill presents safety controls for autonomous trading, but the instruction-only artifact set provides no code or configuration showing these limits are enforced.
## Safety - Max 5% portfolio per trade - Stop-loss at 20% - Daily reporting
Treat these safety statements as unverified until enforceable controls are implemented and reviewable.