Polymarket Odds

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to be a read-only Polymarket lookup that calls the public Polymarket API and does not request credentials or modify data.

This looks safe for ordinary public Polymarket odds queries. Be aware it relies on an external public API and its results should be treated as market information, not financial advice.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

Using the skill may contact Polymarket's public API to retrieve market data.

Why it was flagged

The script performs outbound API requests to the declared Polymarket endpoint. This is expected for the skill's purpose and no credential use, local file access, or data mutation is shown.

Skill content

BASE_URL = "https://gamma-api.polymarket.com"
...
with urllib.request.urlopen(req, timeout=15) as resp:

Recommendation

Use it for public market lookups, and avoid treating returned market text as authoritative beyond being external market data.