polymarket

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow searches Polymarket prediction markets via search.py, which fetches external search results and market metadata from Gamma API containing outsider-submitted text/market titles.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly provides tools and workflows for trading on Polymarket prediction markets, including placing orders, managing positions, wrapping collateral, and signing blockchain transactions using wallet tools (wallet_sign_typed_data and wallet_transfer). This falls squarely under the criteria for Direct Financial Execution (Crypto/Blockchain/Market Orders).