polymarket-maker-rebate-bot

Pass

Audited by Gen Agent Trust Hub on Apr 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run and subprocess.Popen to manage its internal execution flow. Specifically, scripts/run_local_pull_runner.py executes the core trading agent (scripts/agent.py) as a subprocess when a scheduled job is retrieved. Additionally, scripts/polymarket_live.py invokes the seren-mcp utility to handle platform-specific tool calls.
  • [EXTERNAL_DOWNLOADS]: The skill fetches market data, order books, and historical price history from the Polymarket CLOB API (clob.polymarket.com) and the Seren data publisher (api.serendb.com). These are functional requirements for its trading and backtesting capabilities.
  • [DATA_EXFILTRATION]: When running in scheduled mode via the local pull runner, the skill transmits execution results, including exit codes and a tail of the stdout/stderr logs, back to the seren-cron service at api.serendb.com for status monitoring. This is a documented feature of the vendor's orchestration platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 9, 2026, 12:50 PM