moonpay-scout
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
mpCLI (MoonPay) to execute trade orders on the Polymarket platform. This is a core feature of the agent's arbitrage functionality. - [INDIRECT_PROMPT_INJECTION]: The skill ingests market titles, questions, and resolution criteria from external prediction platforms (Polymarket and Kalshi).
- Ingestion points: Market data retrieved during the scanning phase in Step 1 and Step 2.
- Boundary markers: None; external event data is processed directly as part of the match finding and math calculation logic.
- Capability inventory: The skill utilizes the MoonPay CLI to perform market searches and execute financial transactions (
mp prediction-market position buy). - Sanitization: No explicit verification or sanitization of external market strings is performed before they are incorporated into the trade execution logic.
Audit Metadata