Bankr Agent - Polymarket

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly interacts with Polymarket (e.g., "Search Polymarket", "Check odds", "Show my Polymarket positions"), which requires fetching and interpreting public, user-generated prediction market content from a third-party site (Polymarket), exposing the agent to untrusted external text that could carry indirect prompt injections.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform on-chain financial actions: it targets Polymarket (a decentralized prediction market on Polygon), uses USDC.e for betting, includes explicit examples like "Bet $10" / "Place $5", and supports "View/redeem positions" and an "Auto‑Bridging" feature to move funds onto Polygon. These are concrete crypto/blockchain money-moving operations (placing bets = sending transactions, bridging = transferring/swap of tokens, redeeming positions = cashing out), so the tool's primary and explicit definition is to execute financial transactions.