Polymarket API

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to be a straightforward read-only Polymarket data lookup tool, with no evidence of credential use, persistence, local data collection, or account-changing behavior.

This skill is reasonable to install if you want public Polymarket market data. Expect it to make outbound requests to Polymarket's API, and review the small included Python script if source provenance matters to you.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill will contact Polymarket's API and return public market data; it does not require login or change any account data.

Why it was flagged

The script makes fixed outbound requests to Polymarket's public API to retrieve market and event data, which matches the stated purpose but is still external network use users should notice.

Skill content
BASE_URL = "https://gamma-api.polymarket.com" ... urllib.request.urlopen(req, timeout=15)
Recommendation

Use it for public market lookups and avoid putting private or sensitive information into lookup terms.

What this means

Users cannot independently verify the upstream project identity from the metadata alone.

Why it was flagged

The registry metadata does not provide an upstream source or homepage, so provenance is limited even though the included code is small, visible, and has no remote install step.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the included script before use, and prefer skills with clear source or homepage metadata when provenance is important.