polymarket-public-data

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external market data (e.g., questions, slugs, and outcomes) fetched from Polymarket APIs.
  • Ingestion points: External data is ingested from gamma-api.polymarket.com and clob.polymarket.com in SKILL.md.
  • Boundary markers: The skill does not explicitly define delimiters for external data within the agent instructions.
  • Capability inventory: The skill utilizes curl for network read operations and publishes JSON payloads to the AI-Trader service.
  • Sanitization: No explicit validation or filtering logic is provided for the market metadata returned by the APIs.
  • [DATA_EXPOSURE_EXFILTRATION]: The skill performs network operations to official Polymarket domains for market research.
  • The instructions use curl to fetch public orderbook and metadata from gamma-api.polymarket.com and clob.polymarket.com.
  • This activity is limited to public metadata and does not involve the transmission of sensitive local files or credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 07:19 AM