Bankr Dev - Polymarket

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly searches and displays content from Polymarket (public prediction markets) — e.g., "Search Polymarket for {query}" and "Trending markets" — which are user-generated, open web sources the agent will read and interpret.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to interact with a prediction market and includes operations that move funds: "Bet $10 on Yes", "Bet $5 on No", and "Redeem my Polymarket positions". It names the underlying chain (Polygon) and the token used (USDC.e), and provides an execute() client call for placing bets and managing positions. These are crypto/blockchain financial actions (sending transactions/signing to place bets and redeem funds), so it grants direct financial execution capability.