Back to skill
Skillv1.0.0
ClawScan security
polymarket-predictradar-market-movers-skills · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 2, 2026, 7:21 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is internally consistent: it describes probability-movement scanning on Polymarket, relies on a separate polymarket-data-layer for data, and stores alert configs locally — it does not request unrelated credentials or perform unexpected installs.
- Guidance
- This skill appears to do what it claims, but review two things before installing: 1) Inspect the polymarket-data-layer skill (it provides Gamma/data access) to see if it requires API keys or broader permissions you must supply. 2) Be aware the skill will read and append scripts/state/alerts.json in its directory (local alert state) and may perform web searches to attribute causes — if you have privacy concerns about search queries, limit that behavior. No unrelated credentials are requested by this skill itself, and there are no downloads or external install scripts included.
Review Dimensions
- Purpose & Capability
- okThe name/description match the instructions: queries trade price changes, filters/joins by outcome_index, and uses Gamma via the referenced polymarket-data-layer. There are no unrelated required binaries or env vars.
- Instruction Scope
- noteRuntime instructions direct the agent to use the polymarket-data-layer (for Gamma calls), optionally run web searches to find news for top markets, and read/append the local scripts/state/alerts.json file. These actions are within the stated purpose but do include external web queries and local file writes (alerts state).
- Install Mechanism
- okNo install spec or third-party downloads; this is instruction-only with no code files to execute. Lowest-risk install footprint.
- Credentials
- okThe skill declares no environment variables or credentials. It does depend on the separate polymarket-data-layer skill for data access; any credentials required for Polymarket/Gamma would come from that other skill, not this one.
- Persistence & Privilege
- okalways:false (not force-included). The skill writes/updates its own alerts file at scripts/state/alerts.json — this is scoped to the skill's directory and matches its alert-management feature.