Polymarket User Analyzer

• Analyzed: May 12, 2026, 4:18 AM
• Findings: 1
• Version: 1.0.0
• Hash: 6dd69db88226e4392e903da2b4cc1eb1bfb5457aa210730f5ce530fa0333407e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill's core functionality to analyze Polymarket user trading strategies is benign, making legitimate network calls to polymarket.com and data-api.polymarket.com. However, the `scripts/analyze_user.js` file uses `fs.writeFileSync` to save a report to a user-specified path (`--output <file>`) without sanitizing the filename. This introduces a path traversal vulnerability, allowing an attacker to write files to arbitrary locations on the filesystem if they can control the input, which is a significant security flaw. There is no evidence of intentional malicious behavior such as data exfiltration, backdoors, or prompt injection for harmful objectives.