kalshi-api

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The provided documentation describes the technical requirements for integrating with the Kalshi Trade API. It includes endpoint URLs, authentication logic (RSA-PSS signatures), and data structure definitions for market payloads and order books.
  • [EXTERNAL_DOWNLOADS]: The skill references official API endpoints at kalshi.com and kalshi.co for production and demo environments. These are legitimate resources for a well-known regulated financial exchange and do not represent a security risk.
  • [INDIRECT_PROMPT_INJECTION]: The documentation identifies that the API returns market rule text in fields like rules_primary and rules_secondary. This represents a potential ingestion surface for indirect prompt injection if the agent processes this external data without sanitization; however, the source is a reputable regulated venue and the document itself is purely informational.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 07:40 AM
Security Audit — agent-trust-hub — kalshi-api