vike-polymarket-trader
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
vike-datacommand-line utility to retrieve wallet statistics, trade history, and market positions. This is the primary function of the skill and uses a tool provided by the vendor. - [INDIRECT_PROMPT_INJECTION]: The skill processes and interprets data retrieved from the Polymarket platform via an external tool, creating a surface for potential indirect prompt injection if the source data contains malicious instructions.
- Ingestion points: External data regarding wallet trades, categories, and market resolutions fetched via the
vike-data polymarket walletcommand (SKILL.md). - Boundary markers: None explicitly provided in the skill instructions to separate the external data from the agent's internal logic.
- Capability inventory: The skill is authorized to use the
vike-datacommand-line tool via Bash (SKILL.md). - Sanitization: There are no explicit sanitization or filtering steps described for the data returned from the external API.
Audit Metadata