Polymarket Odds

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: pm-odds Version: 1.0.0 The skill bundle is benign. The `SKILL.md` provides clear, benign instructions for an AI agent to interact with the `polymarket.py` script, without any prompt injection attempts or out-of-scope commands. The `polymarket.py` script uses standard Python libraries to query the public Polymarket API (`gamma-api.polymarket.com`) as its sole network interaction, and it does not access sensitive files, execute arbitrary commands, or attempt any form of data exfiltration or persistence.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

Using the skill may contact Polymarket's public API to retrieve market data.

Why it was flagged

The script performs outbound API requests to the declared Polymarket endpoint. This is expected for the skill's purpose and no credential use, local file access, or data mutation is shown.

Skill content

BASE_URL = "https://gamma-api.polymarket.com"
...
with urllib.request.urlopen(req, timeout=15) as resp:

Recommendation

Use it for public market lookups, and avoid treating returned market text as authoritative beyond being external market data.