polymarket-skill
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external prediction markets which could theoretically be used for injection attacks.
- Ingestion points: The agent retrieves market titles, questions, and descriptions using the
agent polymarket marketsandagent polymarket marketcommands as described inSKILL.md. - Boundary markers: Absent. The instructions do not define clear delimiters or specific instructions for the agent to ignore potential commands embedded in the external market data.
- Capability inventory: The skill provides the agent with the ability to execute on-chain financial transactions, including
clob-buyfor placing bets,sellfor closing positions, andsend-nativefor transferring tokens. - Sanitization: Absent. There is no mention of validating or filtering the market-provided strings before the agent processes them.
- [COMMAND_EXECUTION]: The skill relies extensively on the
agentCLI tool to perform all operations, including account management, market analysis, and transaction execution.
Audit Metadata