Polygon Agent
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
polygon-agentCLI tool and instructs the agent to execute various shell commands for wallet setup, financial transactions, and API interactions. - [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
@polygonlabs/agent-cliglobal NPM package. It also dynamically references and loads additional instruction sub-skills fromhttps://agentconnect.polygon.technology/. - [DATA_EXFILTRATION]: The
x402-paycommand is used to send data, including user code snippets, to an external service athttps://x402-api.onrender.com/api/code-review. This involves exposing potentially sensitive local content to a third-party endpoint for processing. - [PROMPT_INJECTION]: The skill processes untrusted content from external APIs (Twitter, web search, article extraction), creating a surface for indirect prompt injection where malicious instructions in the data could influence agent behavior.
- Ingestion points: Responses from endpoints such as
/api/twitter,/api/search, and/api/articleonx402-api.onrender.com. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are defined for the data returned by these tools.
- Capability inventory: The agent has broad capabilities including wallet management, asset transfers, and executing shell commands via the CLI tool.
- Sanitization: The instructions do not specify any validation or sanitization of the external content before it is processed by the agent.
Audit Metadata