moonpay-fund-polymarket
Fail
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructions include a command to download and execute an installation script for the Polymarket CLI using
curl | sh. The source is the official Polymarket GitHub repository (https://raw.githubusercontent.com/Polymarket/polymarket-cli/main/install.sh). This behavior is consistent with the skill's goal and utilizes a well-known service endpoint. - [COMMAND_EXECUTION]: The skill uses the
polymarketandmp(MoonPay) CLI tools to perform administrative and financial tasks, such as wallet creation, bridging tokens, and placing orders on prediction markets. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the injection of user-controlled data into shell commands through CLI arguments like
--queryand--wallet. - Ingestion points: User-provided values for search strings, wallet addresses, and transaction amounts in
SKILL.md. - Boundary markers: None identified in the provided instructions.
- Capability inventory: Shell command execution via project-specific command-line interfaces.
- Sanitization: No explicit validation or sanitization of user-provided parameters is specified.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/Polymarket/polymarket-cli/main/install.sh - DO NOT USE without thorough review
Audit Metadata