polymarket-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md explicitly directs integrations to consume Polymarket’s public Gamma/Data APIs and WebSocket feeds (e.g., "Use Gamma API first for public browsing, discovery..." and the listed docs links), which requires ingesting public/user-generated market metadata that can influence discovery, trading decisions, and tool behavior—thus exposing the agent to untrusted third‑party content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about integrating with Polymarket's trading surfaces (CLOB API) and includes trading-specific operations: order books, order management, prices/spreads, trading flows, and market discovery separation. It explicitly references EIP-712 order signing, L2 HMAC authentication, wallet/account types (EOA, POLY_PROXY, GNOSIS_SAFE), SDKs for signing/submission, and onchain settlement on Polygon. These are specific crypto/blockchain trading and transaction-signing capabilities (i.e., directly moving value and placing market orders), not generic tooling. Therefore it grants direct financial execution authority.