polymarket

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill monitors and streams real-time market comments and social reactions via its WebSocket client setup (topics like comments), allowing unauthenticated outsiders to post free text messages that are ingested by the agent.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes integration with Polymarket, which involves prediction markets and trading capabilities (buying/selling assets/shares on prediction markets). Specifically, it mentions "Trading API (REST & WebSocket)", "User portfolio management", and "implementing trading strategies", which falls under Market Orders (buying/selling stocks or assets) and financial execution via prediction market trading.