polymarket

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill operates by executing local commands through the robomotion CLI. These commands facilitate connection management (polymarket_connect), market data retrieval (polymarket_get_markets), and account analytics (polymarket_get_positions).
  • [EXTERNAL_DOWNLOADS]: To function, the skill requires the installation of a vendor-specific package via robomotion install polymarket. This follows the standard extension model for the Robomotion ecosystem and retrieves components from the vendor's own registry.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: While the skill accesses sensitive information such as wallet addresses and position data, this behavior is central to its stated purpose of market analytics. Credentials like the ROBOMOTION_API_TOKEN are managed via the Robomotion vault, which is a secure practice for handling sensitive tokens.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 12:34 AM
Security Audit — agent-trust-hub — polymarket