polymarket

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the skill’s WebSocket market feed (wss://ws-subscriptions-clob.polymarket.com/ws/market) ingests free-text fields from live public messages (JSON parsed from event.data) that could contain outsider-authored content such as market titles/questions or other string metadata.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a trading SDK/integration for Polymarket: it contains concrete APIs and code examples that create API credentials via EIP-712 signing, initialize authenticated trading clients, create-and-post orders (limit and market), cancel orders, perform USDC token approvals, and execute relayer (gasless) transactions. These are specific financial execution operations (placing/cancelling trades, approving and moving collateral), not generic tooling — therefore it grants Direct Financial Execution Authority.