polymarket-markets
Pass
Audited by Gen Agent Trust Hub on Feb 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [External Downloads] (LOW): The skill uses
curlandhttpxto download data fromhttps://gamma-api.polymarket.comat runtime. - [Data Exfiltration] (LOW): Network operations are performed to a non-whitelisted domain. No access to sensitive files was detected, so the risk is confined to the specific API interactions.
- [Indirect Prompt Injection] (LOW): The skill ingests untrusted data from external market descriptions and outcomes.
- Ingestion points: Data entering via
gamma-api.polymarket.comendpoints (search, markets, events). - Boundary markers: Absent; the skill does not explicitly delimit external content to the agent.
- Capability inventory: Limited to network requests (
curl,httpx). No subprocess execution or file writes are present. - Sanitization: No sanitization or validation of the API response data is performed before passing it to the agent context.
Audit Metadata