polymarket
Warn
Audited by Snyk on Jun 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). The skill calls Polymarket’s public Gamma API at runtime (
requests.getinfetch()), then converts outsider-authored market/event fields likeevent.title,event.description,market.question, andmarket.groupItemTitleinto readable text viaformat_event()/format_market()and prints/returns it to the agent context—an indirect prompt-injection surface from third-party free text.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata