polymarket-public-data

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md explicitly instructs the agent to fetch and parse market metadata and outcome text from public Polymarket endpoints (https://gamma-api.polymarket.com/markets and https://clob.polymarket.com/book), and those untrusted public responses (e.g., the "question" and "outcomes" fields) are read and used to choose outcomes and drive publishing decisions, so third-party content can materially influence agent behavior.