Security audit
Openclaw Skill
Security checks across malware telemetry and agentic risk
Overview
This disclosed Polymarket skill matches its stated purpose, but it can place or cancel real-money trading orders with configured API credentials and no artifact-level confirmation or limits.
Review this carefully before installing because it enables real trading through your OpenClaw agent. If you only want analytics, avoid configuring trading credentials or use a restricted key if prob.trade supports one. If you do use it for trading, keep balances small, require explicit confirmation for every order, and monitor or revoke API keys from the prob.trade dashboard.
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.