polymarket-predictradar-market-discovery-skills

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:34 PM UTC
• Version:
  1.0.0

Overview

This skill is a read-only Polymarket market-discovery helper, with some ordinary integration caveats around local command execution and broad activation phrases.

Install this only in an environment where you trust the referenced local polymarket-data-layer code. Treat its outputs as market discovery, not financial advice, and be aware that generic questions like "what can I trade" may trigger Polymarket-specific data queries.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The trigger list is extremely broad and includes common conversational phrases such as 'what can I trade' and 'what markets are there', which can cause the skill to activate outside clearly intended contexts. Unintended activation can override other skills, route users into financial/market content unexpectedly, and increase the chance that the agent performs unnecessary data access or presents trading-related suggestions when the user did not explicitly request them.

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The three mode definitions overlap substantially: 'trending', 'new', and category browsing can all plausibly match similar user requests, and one mapping even changes sort behavior for 'most traders' while still calling it Trending. Ambiguous routing increases the risk of inconsistent behavior, wrong query paths, and misleading results, especially in a trading context where users may rely on rankings or discovery output to make decisions.

VirusTotal

65/65 vendors flagged this skill as clean.