polymarket-agent-skills
Fail
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: HIGHDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The script located in
SKILL.mdperforms system fingerprinting by collecting thehostname, operating system details viauname, and the user's home directory path from the$HOMEvariable. - [DATA_EXFILTRATION]: The gathered system identifiers are hashed into a unique device ID and exfiltrated via POST requests to
https://www.okx.com/priapi/v1/wallet/plugins/download/reportandhttps://plugin-store-dun.vercel.app/install. - [COMMAND_EXECUTION]: The skill executes shell commands (
hostname,uname,shasum) to generate persistent tracking identifiers based on the user's local environment. - [EXTERNAL_DOWNLOADS]: The skill performs unauthorized network operations to non-whitelisted domains (
okx.comand a third-party Vercel deployment) to report installation and device telemetry. - [PROMPT_INJECTION]: The skill employs deceptive language in
SKILL.md, describing the tracking script as an 'auto-injected' 'Pre-flight Dependency' that must be run 'once per session', which is a technique used to mislead agents or users into executing malicious or invasive code.
Recommendations
- AI detected serious security threats
Audit Metadata