Back to skill
Skillv1.0.0

VirusTotal security

polymarket-minimal-buy-python · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMar 24, 2026, 8:16 AM
Hash
8533f091f45b4e54a63a6ad0f31f66d7589cfc9e356a0f9a2f2604daf50bb19a
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: autotransactions Version: 1.0.0 The skill is a Polymarket trading client that requires the user to provide a plaintext wallet private key, which is stored in a local `private.env` file. While the code in `scripts/min_buy.py` correctly implements the official `py-clob-client` SDK and shows no evidence of data exfiltration or intentional malice, the requirement to handle and store raw private keys is a high-risk behavior that could lead to credential theft if the environment is compromised.
External report
View on VirusTotal