Polymarket Latest Events

• Risk level: Low
• Analyzed: May 1, 2026, 5:30 AM
• Findings: 1
• Version: 0.1.0

Overview

This instruction-only skill fetches public Polymarket event data; the only notable behavior is a disclosed outbound request to Polymarket, optionally via curl.

Install only if you are comfortable with the agent making public web requests to Polymarket to retrieve event data. The provided artifacts do not show code execution beyond an optional curl example, credential use, persistence, or data mutation.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Note

What this means

Using the skill may cause the agent to contact Polymarket's public API to retrieve market/event information.

Why it was flagged

The skill relies on an outbound web request, and optionally a shell curl command, to fetch public data. This is disclosed and directly aligned with the skill's purpose.

Skill content

Use web_fetch (or curl via Bash) to call the Polymarket Gamma API. No API key or authentication is required.

Recommendation

This appears reasonable for the stated purpose. Prefer the web_fetch option when available, and avoid adding sensitive information to query parameters.