polymarket-ws-streaming
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides procedural documentation for integrating with Polymarket WebSockets. The endpoints listed (ws-subscriptions-clob.polymarket.com and ws-live-data.polymarket.com) are official domains associated with the service. No executable code, remote dependencies, or suspicious commands were found in the instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill describes the ingestion of external data from WebSocket feeds. While this represents a data ingestion surface, the skill does not define any dangerous capabilities (such as shell execution, file system writes, or network exfiltration) that would allow for exploitation of this surface.
- Ingestion points: WebSocket streams from polymarket.com endpoints described in Step 1.
- Boundary markers: None defined in the instructions.
- Capability inventory: No tools or command execution capabilities are defined in the skill content.
- Sanitization: Not addressed in the architectural guide.
Audit Metadata