nothing-ever-happens-polymarket-bot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The bot scans Polymarket prediction markets via API and evaluates market titles and descriptions, which are outsider-authored free text inputs ingested at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The GitHub repository referenced in the installation steps is a third-party personal project used to clone and install the bot code, constituting an unofficial operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documents a Polymarket trading bot that includes functionality for live order transmission, wallet private keys, funder addresses, and polygon RPC URLs to buy and sell prediction market positions. This constitutes direct financial execution capability (market orders/crypto trading).