Polymarket Real Time Trades Stream

• Analyzed: May 18, 2026, 7:16 AM
• Findings: 1
• Version: 1.0.5
• Hash: 3fe74b323b9dec808fad2b513b7a9bf67056f33b3673a7ba899f428b0693a5bb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate tool for streaming real-time Polymarket trade data via the Bitquery GraphQL API. The Python script (scripts/stream_polymarket.py) correctly implements the WebSocket subscription and includes extensive documentation (SKILL.md) regarding the inherent security risks of the Bitquery API (which requires the API key in the connection URL). No evidence of data exfiltration, malicious execution, or prompt injection was found; the code is transparent and aligns perfectly with its stated purpose.