Search, trade, manage positions, and automate custom strategies on Polymarket using natural language commands via an AI agent.
Security Analysis
high confidenceThe skill is an instruction-only MCP connector that routes an MCP client to askgina.ai using a user-generated token; its requirements and instructions are consistent with that purpose.
The name/description claim Polymarket trading via Gina and the SKILL.md instructs the user to generate and paste a Gina MCP token that points an MCP client at https://askgina.ai/ai/predictions/mcp — this is coherent and expected for a connector that enables searching, trading, and automations.
All runtime instructions are limited to obtaining a long-lived JWT from askgina.ai and pasting it into an MCP client config; there are no instructions to read unrelated local files or environment variables. Note that pasting the token into the client grants the external service the ability to act on your behalf (search, place trades, schedule automations), so treating the token as a high-value secret is essential.
No install spec and no code files are present (instruction-only), so nothing is downloaded or written by an installer — this is the lowest-risk install model and matches the skill's stated behavior.
The skill declares no required env vars or credentials in the registry; instead it relies on a user-generated JWT pasted into the MCP client. That is proportional to a remote connector, but because tokens are long-lived (90 days) and grant trading capabilities, the sensitivity and blast radius of that single token is high — the SKILL.md does warn about treating tokens like private keys.
always:false (not force-included) and no installation actions are requested. The skill enables agent-driven actions only via the external token and MCP client configuration; autonomous invocation is allowed by platform default but is not introduced by the skill itself.
Guidance
This skill is a simple connector that routes your MCP client to askgina.ai using a token you generate. Before installing/using it: (1) Verify you trust https://askgina.ai and its docs; confirm TLS and the domain are correct. (2) Treat the generated token like a secret — it can authorize real trades and automations; start with read-only queries and small test trades. (3) Never paste private keys into the flow; the SKILL.md explicitly warns against it. (4) If you fear token theft, generate a token with minimal scope if available, keep tokens short-lived, and revoke immediately if exposed. (5) If you want tighter control, avoid enabling unattended/autonomous agent actions that could place trades without manual confirmation.
Latest Release
v0.1.2
- Added new example prompts for onboarding and getting started (e.g. “What can you do Gina”). - Clarified initial user instructions in the feature table and quick start guide. - Updated example prompts throughout documentation for improved clarity. - Version bump to 0.1.2.
Popular Skills
Published by @sidshekhar on ClawHub
