PolyEdge - Polymarket Correlation Analyzer

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If an agent uses the hosted API, it may send market identifiers to an external service and require a USDC payment.

Why it was flagged

The skill documents an external paid API path. This is disclosed and aligned with the service model, but paid requests should remain under user control.

Skill content
GET https://api.nshrt.com/api/v1/correlation?a=<slug>&b=<slug> ... Pricing: $0.05 USDC on Base L2 ... Retry with `X-Payment: <tx_hash>` header
Recommendation

Use the local analyzer when possible, and require explicit user approval before any x402 payment or paid API call.

What this means

A user or agent could treat a heuristic signal as a reason to trade even though the tool does not model liquidity, slippage, or full market risk.

Why it was flagged

The skill outputs trading-style recommendations, while also disclosing important limitations. This is purpose-aligned but could influence financial decisions if over-trusted.

Skill content
`BUY_YES_B` | Market B underpriced, buy YES ... Limitations ... Does not account for market liquidity/slippage ... Not financial advice
Recommendation

Treat outputs as informational only and require human review before any Polymarket trade or financial action.

What this means

If a user pays the hosted API, their wallet address and payment transaction may appear in the service dashboard.

Why it was flagged

The dashboard aggregates and returns recent payment transaction hashes, sender wallet addresses, and amounts. These are public blockchain records, but the dashboard links them to use of this service.

Skill content
"recent_payments": recent_txs ... "hash": tx.get("hash"), "from": tx.get("from"), "amount": int(tx.get("value", 0)) / 1e6
Recommendation

Users who care about wallet privacy should review the dashboard behavior before paying and consider using a wallet address they are comfortable linking to this service.