Polymarket Odds 1.0.0

Query Polymarket prediction market odds and events via CLI. Search for markets, get current prices, list events by category. Supports sports betting (NFL, NB...

This skill appears coherent and low-risk: it queries public Polymarket endpoints and requires no credentials. Before installing or executing the script, consider (1) verifying the skill source since 'source' and homepage are missing, (2) reviewing the included polymarket.mjs file yourself or running it in a sandbox to confirm behavior, (3) ensuring your Node runtime supports global fetch (Node 18+), and (4) noting a minor metadata mismatch (ownerId in _meta.json differs from registry metadata) which could indicate packaging inconsistency rather than malicious intent. If you plan to run it on sensitive systems, run it in an isolated environment and monitor network calls to confirm they only target the documented Polymarket domains.

Type: OpenClaw Skill Name: polymarket-odds-1-0-0 Version: 1.0.0 The skill bundle is benign. The `SKILL.md` provides clear, non-malicious instructions for the AI agent, aligning with the skill's stated purpose without any prompt injection attempts. The `polymarket.mjs` script uses standard Node.js `fetch` to interact with legitimate Polymarket APIs (`https://gamma-api.polymarket.com`, `https://clob.polymarket.com`). Crucially, all user-provided inputs for URL parameters are properly sanitized using `encodeURIComponent`, preventing URL injection vulnerabilities. There is no evidence of file system access, environment variable exfiltration, arbitrary command execution, persistence mechanisms, or communication with suspicious external domains.