Polymarket API

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill will contact Polymarket's API and return public market data; it does not require login or change any account data.

Why it was flagged

The script makes fixed outbound requests to Polymarket's public API to retrieve market and event data, which matches the stated purpose but is still external network use users should notice.

Skill content
BASE_URL = "https://gamma-api.polymarket.com" ... urllib.request.urlopen(req, timeout=15)
Recommendation

Use it for public market lookups and avoid putting private or sensitive information into lookup terms.

What this means

Users cannot independently verify the upstream project identity from the metadata alone.

Why it was flagged

The registry metadata does not provide an upstream source or homepage, so provenance is limited even though the included code is small, visible, and has no remote install step.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the included script before use, and prefer skills with clear source or homepage metadata when provenance is important.