polygon-agent-kit
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
polygon-agentCLI to perform blockchain operations including wallet creation, token transfers, and DeFi interactions. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
polygon-agent-kitdirectly from the 0xPolygon GitHub repository. - [DATA_EXFILTRATION]: The skill handles sensitive wallet credentials and configuration. It reads from and writes to
~/.polygon-agent/builder.jsonto manage encrypted private keys and project access tokens. Instructions also direct the agent to extract and export theaccessKeyfrom local storage for Polymarket operations. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface through the
x402-paycommand. - Ingestion points: External data is ingested from third-party APIs (such as web search, news, and code reviews) via the x402 bazaar service.
- Boundary markers: No specific delimiters or "ignore instructions" markers are specified for the external data returned by the CLI.
- Capability inventory: The skill allows the agent to execute shell commands via the
polygon-agentbinary and perform filesystem operations within the~/.polygon-agent/directory. - Sanitization: The instructions do not define sanitization or validation logic for data retrieved from external API endpoints.
Audit Metadata