polymarket-arbitrage-bot

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's trading and wallet access are aligned to its stated purpose, and network flows point to official Polymarket endpoints, so this is not obviously credential-harvesting malware. However, it is still high risk because it enables autonomous financial trading with raw private keys, and the install source does not clearly match the named publisher, creating a notable trust gap.

Confidence: 85%Severity: 81%
Audit Metadata
Analyzed At
Mar 29, 2026, 11:15 AM
Package URL
pkg:socket/skills-sh/Aradotso%2Ftrending-skills%2Fpolymarket-arbitrage-bot%2F@baed266f41c018582c5c33558491cbb05655996e