polymarket-sync-series

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill calls the public Polymarket Gamma API via the "polymarket" connector (see references/series-api.md and the get_series command) to fetch public series data (titles/descriptions/images) and ingests those documents into embeddings, meaning untrusted, user-visible third‑party content is read and processed by the agent.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 06:54 PM