polymarket-live-executor
Audited by Socket on Mar 9, 2026
1 alert found:
AnomalyThe skill presents a coherent, safety-grounded approach to live Polymarket trading with mandatory human confirmation and burner-wallet safeguards. However, the credential handling (POLYMARKET_PRIVATE_KEY in env/.env), explicit signing of live trades, and logging of trades introduce non-trivial security and data-exposure risks. The overall footprint is proportional to its purpose (live trading with safeguards) but leans toward suspicious rather than benign due to sensitive credential flow and potential for credential leakage via logs or misconfiguration. Treat as SUSPICIOUS with a high need for secure secrets-management practices and explicit, verifiable UI/UX assurances to prevent credential exposure or UI spoofing. If provenance and code integrity are guaranteed (e.g., audited code, restricted log exposure, credential vaulting), risk posture could improve toward BENIGN.