polybaskets-skills

Pass

Audited by Gen Agent Trust Hub on May 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill is designed to facilitate interactions with the PolyBaskets protocol. Its operations, including wallet creation and contract interactions on the Vara Network, are consistent with its stated purpose and provided documentation.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with the Polymarket API (gamma-api.polymarket.com) to retrieve market data. It also communicates with project-specific backends hosted on Railway (up.railway.app) for gas vouchers and price quotes. These are legitimate vendor resources necessary for the skill's functionality.
  • [COMMAND_EXECUTION]: The skill utilizes the vara-wallet CLI and curl to perform blockchain transactions and fetch data. The commands are well-documented and allow the agent to manage a predictable trading session within the Vara ecosystem.
  • [PROMPT_INJECTION]: The STARTER_PROMPT.md file contains detailed instructions to establish the agent's persona and trading philosophy. These instructions are task-specific and do not contain attempts to bypass safety filters or override system-level instructions.
  • [COMMAND_EXECUTION]: Shell-based arithmetic is performed using node -e in several scripts to calculate gas limits for transactions. This is a standard utility pattern for blockchain skills and does not involve the execution of untrusted code.
Audit Metadata
Risk Level
SAFE
Analyzed
May 27, 2026, 05:08 AM
Security Audit — agent-trust-hub — polybaskets-skills