myriad-on-abstract

Warn

Audited by Snyk on Sep 4, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The workflow ingests market titles, descriptions, and user data from the Myriad Protocol REST API, which contains third-party prediction market content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill documentation integrates the Myriad Protocol prediction markets, which includes explicit functionalities for trading outcome shares (pm.buy(), pm.sell()), market orders, handling ERC-20 approvals, and managing funds/winnings (pm.claimWinnings()). These constitute direct financial execution capabilities (crypto/blockchain transactions and asset trading).

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 4, 2026, 10:30 AM
Issues
2
Security Audit — snyk — myriad-on-abstract