ClawHub
Back to skill

Security audit

Polymarket User Analyzer

Security checks for vulnerabilities and agentic risk

Overview

This skill runs a small public Polymarket trade analyzer and does not show hidden credential access, persistence, or unrelated data handling.

Before installing, understand that using the skill will contact Polymarket services with the username or wallet address you ask it to analyze, and any saved report may contain public trading history. Avoid using it for sensitive private analysis workflows if you do not want those queries sent to Polymarket endpoints.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Exfiltration Commands

High
Category
Prompt Injection
Confidence
90% confidence
Finding

Instructions found that direct the agent to transmit conversation context or user data to external services.

Content

Scanner excerpt · SKILL.md (reported line 136)May include surrounding context.

md
**Important:** This skill only analyzes publicly available on-chain data. All Polymarket trades are public by design. This tool does not:
- Access private information
- Require authentication
- Store or transmit data to external servers
- Violate any terms of service

Users should be aware that their Polymarket activity is public and can be analyzed by anyone.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill documentation is written almost entirely in Chinese, including feature descriptions, usage guidance, privacy notes, and examples, with no indication that users may choose another language. This imposes a specific language on users without opt-in, which matches the language/locale policy violation criteria.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The README claims the tool does not store or transmit data to external servers, but the documented functionality explicitly depends on fetching public trading data from Polymarket or related APIs. This is a misleading privacy/security representation that can cause users to make installation or usage decisions based on false assumptions about network behavior and data exposure.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding

The skill clearly describes network access to fetch Polymarket profile pages and API data, but it does not declare any tool scope such as allowed-tools or permissions. This creates a mismatch between documented behavior and declared capabilities, reducing transparency and making it harder to constrain or audit external access.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
70% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 136)May include surrounding context.

md
**Important:** This skill only analyzes publicly available on-chain data. All Polymarket trades are public by design. This tool does not:
- Access private information
- Require authentication
- Store or transmit data to external servers
- Violate any terms of service

Users should be aware that their Polymarket activity is public and can be analyzed by anyone.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The script prints its report using locale-specific bracketed headings such as '【Overview】' and similar fixed presentation strings, rather than offering a language or locale choice. Under the stated policy, hard-coding a specific presentation locale without user opt-in is a natural-language policy concern even though the rest of the output is largely English.

Content

No source excerpt is available for this finding.