polymarket-plugin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads market details, prices, and outcome text directly from Polymarket APIs (CLOB, Gamma, and Data APIs), which are ingested into the LLM context and explicitly noted as untrusted external content containing free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The provided skill documentation defines a specialized tool (polymarket-plugin) that explicitly includes capabilities for trading prediction markets, buying and selling outcome tokens, managing orders, redeeming winning tokens, depositing and withdrawing funds on Polygon, and executing market orders/limit orders. These constitute explicit financial execution capabilities, specifically including market orders and managing financial positions on blockchain infrastructure.