polymarket-live-executor
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The
scripts/setup_wallet.pyscript generates a new cryptocurrency wallet and prints the private key in plaintext to the console. While this is an interactive setup step, printing unencrypted credentials can lead to exposure in terminal logs or command history.\n- [COMMAND_EXECUTION]: The skill executes financial transactions on the Polymarket exchange using thescripts/execute_live.pyscript. This capability is protected by mandatory human-in-the-loop confirmation ('yes' prompt) and environment variable safety gates (POLYMARKET_CONFIRM), which are required to be set to 'true'.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its interaction with external market data.\n - Ingestion points: Data is fetched from the Polymarket API in
scripts/check_positions.pyandscripts/execute_live.py.\n - Boundary markers: The skill implements a manual confirmation checkpoint before any execution.\n
- Capability inventory: The skill uses the
py_clob_clientlibrary to post orders and manage on-chain positions.\n - Sanitization: No explicit sanitization or filtering is performed on data retrieved from the Polymarket order book or trade history before display.
Audit Metadata