Security audit
Polymarket Emerging Tech Trader
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed automated Polymarket trading skill that defaults to paper trading and only places live trades when explicitly run in live mode.
Install only if you understand this is an automated trading tool. Keep it in paper mode unless you deliberately want live Polymarket trades, use a least-privileged Simmer API key if available, review the unpinned simmer-sdk dependency, and confirm scheduling settings before enabling unattended runs.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.