polymarket-markets

Pass

Audited by Gen Agent Trust Hub on Feb 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [External Downloads] (LOW): The skill uses curl and httpx to download data from https://gamma-api.polymarket.com at runtime.
  • [Data Exfiltration] (LOW): Network operations are performed to a non-whitelisted domain. No access to sensitive files was detected, so the risk is confined to the specific API interactions.
  • [Indirect Prompt Injection] (LOW): The skill ingests untrusted data from external market descriptions and outcomes.
  • Ingestion points: Data entering via gamma-api.polymarket.com endpoints (search, markets, events).
  • Boundary markers: Absent; the skill does not explicitly delimit external content to the agent.
  • Capability inventory: Limited to network requests (curl, httpx). No subprocess execution or file writes are present.
  • Sanitization: No sanitization or validation of the API response data is performed before passing it to the agent context.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 19, 2026, 01:04 PM