kalshi-api
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The provided documentation describes the technical requirements for integrating with the Kalshi Trade API. It includes endpoint URLs, authentication logic (RSA-PSS signatures), and data structure definitions for market payloads and order books.
- [EXTERNAL_DOWNLOADS]: The skill references official API endpoints at
kalshi.comandkalshi.cofor production and demo environments. These are legitimate resources for a well-known regulated financial exchange and do not represent a security risk. - [INDIRECT_PROMPT_INJECTION]: The documentation identifies that the API returns market rule text in fields like
rules_primaryandrules_secondary. This represents a potential ingestion surface for indirect prompt injection if the agent processes this external data without sanitization; however, the source is a reputable regulated venue and the document itself is purely informational.
Audit Metadata