polymarket-trading

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow includes “Getting Fresh News” via web_search (public web content fetched at runtime), which can ingest outsider-authored free text into the agent’s LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly exposes authenticated trading and portfolio-management APIs for a crypto prediction market on Polygon (Polymarket). It includes functions to check USDC balances and positions (polymarket_balances_get, polymarket_positions_list) and to execute market and limit trades: polymarket_markets_buy, polymarket_markets_sell, polymarket_orders_create, polymarket_orders_cancel, polymarket_orders_cancel_all. Example usage shows executing a market buy (polymarket_markets_buy(token_id="...", amount=10)), which is a direct instruction to move funds and place orders on-chain. This is specifically designed for financial operations (crypto trading / market orders), not a generic tool, so it grants Direct Financial Execution Authority.