The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input in the form of a Polymarket address, username, or URL which is then interpolated directly into a shell command.
Ingestion points: The {ADDRESS} variable in the curl command within SKILL.md.
Boundary markers: Absent. There are no instructions to the agent to validate or sanitize the input format before execution.
Capability inventory: The skill uses Bash with curl, Read, Write, and Edit tools.
Sanitization: Absent. The instructions do not specify escaping or validation logic to prevent a malicious user from providing input that escapes the curl command (e.g., via shell metacharacters).
[EXTERNAL_DOWNLOADS]: The skill fetches data from data-api.polymarket.com. This is a well-known service associated with the skill's stated purpose, and the data being accessed is public trading information.
[COMMAND_EXECUTION]: The skill relies on Bash to execute curl commands for data retrieval and potentially for post-processing logic described in the execution steps.

polymarket-brier