polymarket-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses agent polymarket markets --search to find prediction markets, which ingests search results containing outsider-authored market questions and text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The SKILL.md documentation specifically outlines capabilities for executing financial transactions, specifically placing bets/trades on Polymarket prediction markets using the Polygon Agent CLI (agent polymarket clob-buy, agent polymarket sell, and managing collateral/approvals). This falls directly under market orders and trading assets, triggering Risk Score 1.