polymarket-watch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required runtime workflow ingests only first-party structured data via Polymarket MCP tools (polymarket_event_browse/search, polymarket_price_history, polymarket_event_read, polymarket_market_read) and cross-checks via news_browse, but it does not indicate any queue/chat/email/ticket/comment where an outsider can POST free text that the agent reads without first selecting a specific item.