polymarket-copy-trading-bot
Warn
Audited by Socket on Mar 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's trading capabilities align with its stated purpose, but its footprint is high risk: it asks for a raw private key, generates/persists API credentials, and performs autonomous financial transactions. The biggest inconsistency is provenance: the skill is branded by ara.so but instructs installation from an unrelated GitHub repo, so users would grant wallet-signing authority to third-party code that is not clearly published by the claimed skill author.
Confidence: 87%Severity: 89%
Audit Metadata