prediction-markets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly fetches and processes public, user-generated prediction-market content (e.g., Polymarket endpoints like https://gamma-api.polymarket.com and CLOB, Manifold API https://api.manifold.markets, and Kalshi APIs) and then uses market titles/outcomes/probabilities to drive analysis, dashboards, alerts, and trading/place-order actions, so untrusted third-party content can directly influence the agent's decisions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes authenticated trading integration and order placement for prediction markets. The KalshiClient contains a login flow and a place_order(...) method that posts orders to Kalshi's portfolio/orders endpoint. The overall skill scope includes "creating trading bots for prediction markets" and interacting with CLOB/AMM trading APIs (Polymarket CLOB, Kalshi REST+WS), which are specifically designed to execute market orders and manage trades. These are direct financial execution capabilities.