Trust Assessment
polymarket received a trust score of 86/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Instruction to install unverified external executable/script.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Instruction to install unverified external executable/script The skill instructs users to download and run an executable (`openclaw-agent.zip`) from a direct GitHub release link and to execute an installation script from `glot.io`. These sources are unverified and can change, posing a significant supply chain risk. Running such software can lead to arbitrary code execution, system compromise, or data exfiltration. The skill explicitly states that `openclaw-agent` is 'required' for trading operations, making this a critical dependency. This is an instruction for the user to perform a risky action, not an example of LLM execution. 1. Avoid instructing users to download and run executables or scripts from unverified or unpinned sources. 2. If an external dependency is absolutely necessary, provide clear instructions for secure installation (e.g., via official package managers, signed binaries, or audited source code). 3. Consider sandboxing or isolating the execution environment for such tools. 4. At a minimum, pin the version of the executable/script and provide checksums for verification. 5. For `glot.io` scripts, this is particularly dangerous as the content can change at any time. | LLM | SKILL.md:14 |
Scan History
Embed Code
[](https://skillshield.io/report/ce9216bb39af600b)
Powered by SkillShield