Polymarket CLI
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is coherent and purpose-aligned, but it can use a third-party Polymarket CLI for real trading and local wallet-backed actions, so users should keep trades explicitly confirmed.
This skill appears safe for read-only market lookup. Before trading, set up the wallet yourself, never share private keys with the agent, verify every order or on-chain transaction, and only install/use the external Polymarket CLI if you trust its upstream source.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If a user confirms the wrong market, token ID, price, size, or transaction, the agent could help place a real trade or on-chain action that affects funds.
The skill documents commands that can place orders or perform blockchain transactions, while also requiring explicit confirmation for trading.
Requires wallet: `clob create-order`, `clob market-order`, `approve`, `ctf split/merge` ... Agent never runs trading commands without explicit user confirmation each time
Use the skill read-only by default, and confirm every trading or on-chain command manually after checking market, token, side, amount, price, and fees.
A configured wallet can authorize trades and blockchain operations; mishandling the private key or wallet config could expose funds.
The skill relies on a local wallet configuration for wallet-required actions, but explicitly tells the agent not to read private-key files.
~/.config/polymarket/config.json # Private key, chain ID, signature type ... Agent must never read ~/.config/polymarket/config.json or any files containing private keys
Run wallet setup/import commands yourself, never paste private keys into the agent, and consider using a limited wallet with only the funds needed for Polymarket.
Installing the CLI means trusting the upstream Polymarket CLI distribution in addition to this instruction-only skill.
The skill depends on installing an external CLI from upstream package/source channels that are not included in the reviewed artifacts.
brew tap Polymarket/polymarket-cli https://github.com/Polymarket/polymarket-cli ... cargo install polymarket-cli ... git clone https://github.com/Polymarket/polymarket-cli
Install only from the official upstream source you trust, keep it updated, and review upstream release/source information before using it with a funded wallet.
Saved preferences may reveal interests or trading habits and may influence when the skill activates in later conversations.
The skill can persist user preferences, tracked markets, and trading preferences for future use, with user permission.
With user permission, store in `~/polymarket-cli/memory.md`: ... Markets they asked to track ... Trading preferences if shared
Only allow storage of preferences you are comfortable keeping locally, and review or delete `~/polymarket-cli/memory.md` if your preferences change.