pm-deep-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill is designed for deep, price-blind research into prediction markets like Polymarket and Kalshi, prioritizing primary sources, official records, and legal dockets.
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes data from external websites and social media platforms, which introduces an attack surface for indirect prompt injection.
- Ingestion points: Web content retrieved via search tools (
wideband,exa-cli), and social media feeds viaxpool. - Boundary markers: The instructions do not define explicit markdown delimiters (e.g., XML tags) to encapsulate retrieved content, though they do provide strict content-type filtering instructions.
- Capability inventory: The agent can browse the web, execute specific search utilities, and read/write research artifacts (sources, claims, reports) to a PMKNB database. It lacks arbitrary shell execution or file system access.
- Sanitization: The skill mandates 'price-blindness' by requiring the redaction of market odds, prices, and trader comments before the data enters the agent's reasoning loop, which serves as a significant privacy and methodology safeguard.
- [COMMAND_EXECUTION]: The skill provides procedures for utilizing external search and discovery utilities such as
wideband,exa-cli, andxpool. These tools are employed within their intended functional scope for information retrieval. - [DATA_EXFILTRATION]: The skill interacts with the PMKNB database to store research outputs. It includes explicit prohibitions against reading or recording sensitive market-implied data (such as PnL or positions), mitigating the risk of inadvertent data exposure.
Audit Metadata