Polymarket Trader

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may recommend when to enter or exit Polymarket positions, which could influence financial decisions.

Why it was flagged

The skill gives concrete financial entry/exit decision rules. This is purpose-aligned and no order-placement code is present, but it could affect real-money trades if combined with separate trading tools.

Skill content
Trade only when there is measurable edge ... Enter only if `edge = fair_prob - market_price` exceeds a threshold.
Recommendation

Use it as an analysis aid, and require explicit user confirmation before any real-money trade or account action.

What this means

Recent fill history and reasons may be exposed in the agent session when the script is run.

Why it was flagged

The helper reads local trading/fill logs and prints fields from them into the analysis context. This is disclosed and purpose-aligned, but those logs may contain private trading history or untrusted text fields.

Skill content
Reads: workspace/polymarket_paperbot/state/events.jsonl ... Prints last N fills with: ts, token, side, px, reason, fair_up, z, against_trend.
Recommendation

Pass only the intended events.jsonl file, avoid logs containing secrets, and treat log contents as data rather than instructions.

What this means

The script may fail until the dependency is installed, and installing dependencies introduces normal package-source trust considerations.

Why it was flagged

This helper relies on an external Python package while the registry shows no install spec or declared requirements. This is an under-declared dependency, not evidence of malicious behavior.

Skill content
from dateutil import parser as dateparser
Recommendation

Install any needed Python dependency from a trusted source and review the bundled script before running it.