ClawHub
Back to skill

Security audit

Polymarket

Security checks across malware telemetry and agentic risk

Overview

This skill enables Polymarket browsing and trading with real funds, but the reviewed behavior is disclosed, purpose-aligned, and gated by explicit confirmation for trades.

Install only if you are comfortable using an agent-assisted tool around real-money Polymarket trading. Review the external CLI installer before running it, protect the wallet/private-key config file, and only use --confirm when you intentionally want to execute or cancel orders.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
94% confidence
Finding
The skill invokes both network access and shell execution but does not declare any permissions, which creates a mismatch between the documented trust boundary and the actual capabilities required. In this skill, that includes piping a remote install script into `sh` and wrapping a trading CLI that can access wallets and execute real-money transactions, so users or platforms may expose more risk than they realize.

External Script Fetching

Low
Category
Supply Chain
Content
cli = find_polymarket_cli()
    if not cli:
        print("❌ Polymarket CLI not installed. Trading commands require it.", file=sys.stderr)
        print("   Install: curl -sSL https://raw.githubusercontent.com/Polymarket/polymarket-cli/main/install.sh | sh", file=sys.stderr)
        sys.exit(1)
    return cli
Confidence
89% confidence
Finding
curl -sSL https://raw.githubusercontent.com/Polymarket/polymarket-cli/main/install.sh | sh

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.