polybaskets-overview

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly instructs the agent to "Search Polymarket — find interesting active markets via the Gamma API" and to compute indexes from live Polymarket prices, so it fetches and interprets public, user-generated Polymarket content that can materially influence betting decisions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about on-chain betting and token operations. It references concrete blockchain contracts and actions: submitting baskets to the BasketMarket contract, calling BetToken/Claim, approving CHIP token spend for BetLane, obtaining signed quotes, placing bets, settling baskets, and claiming payouts. These are specific crypto/blockchain financial execution operations (token transfers/signing/contract interactions), not generic tooling, so it grants direct financial execution capability.