polymarket-fast-loop

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.95). The prompt explicitly instructs the agent to ask for and handle a Simmer API key and — critically — a wallet private key, showing export commands and environment variable usage that require the user to provide those secret values verbatim, so the LLM would be soliciting and could output sensitive credentials.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow queries Polymarket directly via the Gamma API to discover live fast markets, and that fetched outsider-authored market text/data is then ingested into the agent/LLM context for decision-making (indirect prompt-injection risk from public web/API content).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to execute real crypto trades on Polymarket. It requires a SIMMER_API_KEY and the user's WALLET_PRIVATE_KEY, states the SDK will sign orders client-side automatically, and provides a --live flag and CLI/cron instructions to perform live trades using USDC. It performs market discovery, imports markets, and executes orders (including sizing and fee-aware EV checks). These are specific crypto/transaction capabilities (wallet private key, signing, and sending trades), so it grants direct financial execution authority.