polymarket
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches real-time prediction market data from public Polymarket API endpoints, including gamma-api.polymarket.com, clob.polymarket.com, and data-api.polymarket.com.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API responses (market titles, questions, and descriptions). While this introduces a standard attack surface for data ingestion, the script only performs formatting and printing operations, which minimizes risk.
- [COMMAND_EXECUTION]: The provided Python script uses standard libraries (urllib, json) to interact with APIs and does not invoke external shell commands or perform unsafe dynamic execution.
Audit Metadata