openfin-polymarket

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to query Polymarket market data, search endpoints, and public leaderboards, which ingest market metadata and public user names or text from the Polymarket platform.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements direct financial operations including placing orders (POST /order, POST /order/market, POST /orders), wrapping collateral (POST /agent/polymarket/deposit-wallet/wrap-collateral), withdrawing and bridging funds (POST /agent/polymarket/deposit-wallet/withdraw-and-bridge), and redeeming winnings (POST /agent/polymarket/redeem, POST /agent/polymarket/redeem/all). These actions execute or authorize trades, transfers, and settlements on Polymarket. While the documentation mandates user confirmation steps ("Get explicit 'yes' / 'place it' in chat before calling"), these are agent-followed instructions rather than independent access controls enforced by the execution layer or service API. Therefore, qualifying independent access control is absent for these direct financial routes.