myriad-on-abstract
Warn
Audited by Snyk on Sep 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow ingests market titles, descriptions, and user data from the Myriad Protocol REST API, which contains third-party prediction market content.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill documentation integrates the Myriad Protocol prediction markets, which includes explicit functionalities for trading outcome shares (
pm.buy(),pm.sell()), market orders, handling ERC-20 approvals, and managing funds/winnings (pm.claimWinnings()). These constitute direct financial execution capabilities (crypto/blockchain transactions and asset trading).
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata