nothing-ever-happens-polymarket-bot
Warn
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to clone a repository from
https://github.com/sterlingcrispin/nothing-ever-happens.git. This source is not verified or listed as a trusted vendor, posing a supply chain risk. - [REMOTE_CODE_EXECUTION]: After cloning the external repository, the skill instructs the user to install dependencies using
pip install -r requirements.txtand execute the bot withpython -m bot.main. This involves running unverified third-party code with access to the user's environment. - [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface for indirect injection as it processes external data from Polymarket market listings.
- Ingestion points: The bot scans market titles and descriptions from Polymarket standalone non-sports markets.
- Boundary markers: There are no mentioned delimiters or instructions to ignore embedded commands in market data.
- Capability inventory: The skill can execute financial transactions (buy NO positions), write to a local database for recovery, and export database tables via
scripts/export_db.py. - Sanitization: No sanitization or validation of the market data is described before it is processed by the bot logic.
Audit Metadata