Back to skill
Skillv7.1.5
VirusTotal security
Polymarket Arbitrage Pro · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 5:08 AM
- Hash
- 4d67836bfc0096d0b9a461c4c139d6257e727ce316219312c971c21f4d6ddf06
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: polymarket-arbitrage-pro Version: 7.1.5 The skill requests highly sensitive credentials, specifically a Polygon wallet private key (POLYMARKET_PRIVATE_KEY) and a third-party billing key (SKILLPAY_KEY), to perform automated trading. While the code in polymarket-trade.js implements legitimate-looking interactions with the Polymarket CLOB API, it makes deceptive 'risk-free profit' claims in SKILL.md and README.md, which is a common hallmark of financial scams. Furthermore, the tool exfiltrates the user's wallet address and API key to an external endpoint (skillpay.me) for 'billing' purposes, and the arbitrage logic provided is logically flawed and unlikely to generate the promised returns.
- External report
- View on VirusTotal