polymarket
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Python script at 'scripts/polymarket.py' to perform data queries. This is part of the skill's primary functionality.- [EXTERNAL_DOWNLOADS]: The skill connects to 'gamma-api.polymarket.com' to fetch market information. Polymarket is recognized as a well-known service for prediction markets.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it processes untrusted data from an external API and has execution capabilities.
- Ingestion points: Market metadata (questions and descriptions) is ingested from 'gamma-api.polymarket.com' as defined in 'SKILL.md'.
- Boundary markers: There are no instructions to use delimiters or ignore instructions within the data fetched from the API.
- Capability inventory: The skill allows for local command execution via 'scripts/polymarket.py'.
- Sanitization: No sanitization or validation procedures for the API output are mentioned in the skill documentation.
Audit Metadata