polymarket-arbitrage-trading-bot
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the bot's source code from a GitHub repository (
github.com/apechurch/polymarket-arbitrage-trading-bot.git). - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external market APIs to automate trading decisions and execution.
- Ingestion points: Market discovery and price snapshot fetching via
findActive15mMarketandgetBestAskfromgamma-api.polymarket.comandclob.polymarket.com. - Boundary markers: No delimiters or explicit instructions to disregard embedded content are present in the processing logic for external data.
- Capability inventory: The skill is capable of placing market orders (
buyShares), redeeming winning positions (settleRound), and writing trade logs to the local file system (appendHistory). - Sanitization: The bot performs numeric conversion for price values but does not perform broader validation of the external API responses.
- [COMMAND_EXECUTION]: The documentation includes commands to execute build and runtime scripts via
npm(e.g.,npm run dev,npm run prod,npm run build), which facilitate the execution of local TypeScript and JavaScript logic.
Audit Metadata