ClawHub
Back to skill

Security audit

Polymarket

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Polymarket helper that uses ClawLink for market browsing and user-confirmed trading actions.

Install only if you are comfortable connecting Polymarket through ClawLink and approving real trading actions from chat. Review the ClawLink plugin and pairing page, keep credentials out of chat, and treat order placement or cancellation confirmations as financial decisions.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.