Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Polymarket market viewer with optional local watchlist alerts and paper-trading records, not real trading or credential use.
Before installing, be comfortable with the skill fetching public Polymarket data and storing watchlist and paper-trading JSON files in ~/.polymarket. The cron examples and local state changes only happen if you run or configure those commands; it does not use wallets, API keys, or real-money trading.
The skill is presented primarily as a market-query tool, but it also persists watchlists, tracks alerts, and manages a local paper-trading portfolio under ~/.polymarket/. This mismatch can mislead users and reviewers about stateful behavior and local data modification, which is risky because users may invoke it expecting read-only behavior when it actually writes files and maintains ongoing state.
Referenced artifact was not completely inspected
Review `scripts/polymarket.py` before first use to verify behavior.
The skill uses network access and persistent local file reads/writes but does not declare any explicit tool scope or permissions boundary. That makes its real capabilities less transparent to users and the hosting agent, increasing the chance of over-privileged execution or unsafe deployment assumptions.
The manifest describes a read-oriented market query tool: checking odds, finding trending markets, searching events, and tracking price movements. This file also creates a local data directory and persists mutable watchlist and portfolio state, including simulated buy/sell operations, which materially expands behavior beyond simple querying.
The stated purpose is to query prediction markets and track market information. The buy/sell and portfolio commands introduce a separate paper-trading capability with transaction history and cash/position accounting, which is not an obvious requirement for querying odds or market discovery.
This code writes JSON data into a persistent directory under the user's home folder (~/.polymarket), which affects local user data. While the function has a technical docstring, the script does not provide a general upfront disclosure or confirmation that watchlist and portfolio actions will create or overwrite local files.
The remove action modifies the persisted watchlist on disk, which is a user-data-affecting operation. Although success is printed afterward, there is no prior disclosure or warning that the command will permanently update the stored watchlist file.
This operation changes persisted portfolio state by deleting a position from the saved positions list and writing updated history and cash balances to disk. The command reports results after execution, but it does not warn beforehand that saved local portfolio data will be modified.