Polymarket Verify

Security checks across malware telemetry and agentic risk

Overview

This skill runs a local health-check script for a specific Polymarket trading deployment and does not show hidden persistence, network exfiltration, credential theft, or destructive behavior.

Install only if you intend to verify this exact local Polymarket MR-V4 deployment. Review the hardcoded /Users/0xbobby paths before running, and understand that it will inspect local processes and trading deployment files that may reveal sensitive operational details.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 85% confidence
Finding: The activation text is broad enough to trigger on general operational or audit-related requests, not just explicit deployment verification. In an agent setting, this can cause the skill to run a local shell script in situations the user did not clearly intend, increasing the chance of unnecessary command execution and unintended access to operational data.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal