prediction-arbitrage-scout

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches real-time market data from Polymarket (clob.polymarket.com) and Kalshi (api.elections.kalshi.com). These are official API endpoints for well-known prediction market platforms and are used for data retrieval as per the skill's stated purpose.- [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface for untrusted data from external prediction market APIs.
  • Ingestion points: scripts/fetch_polymarket.py and scripts/fetch_kalshi.py retrieve data via network requests.
  • Boundary markers: None identified in the script outputs or reports.
  • Capability inventory: WebFetch (data retrieval), Write (reporting), and Bash (script execution).
  • Sanitization: Data is normalized and cast to numerical types (floats) before analysis, reducing the risk of processing malicious strings as commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 12:48 PM