Polymarket 48h Cross Asset Sync Trader

• Outcome: Review
• Latest audit: May 29, 2026 at 9:36 PM UTC
• Version:
  0.0.3

Overview

This is a disclosed automated Polymarket trading skill, but its live-trading safeguards and actual trade logic do not fully match what users are told.

Install only after reviewing the trading logic yourself. Keep it in paper mode first, use a limited dedicated trading key if possible, set conservative position limits, and enable --live only if you accept that the bot may place losing real-money trades.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Description-Behavior Mismatch

High

• Confidence: 85% confidence
• Finding: The manifest exposes a fairly generic Polymarket-style trading configuration with broad position sizing, thresholds, spread, volume, and portfolio controls, but it does not encode or constrain the specific '48h cross-asset sync' behavior described in the skill metadata. That mismatch is dangerous because users and reviewers may approve the skill based on a narrow strategy description while the actual agent entrypoint can execute a much broader trading strategy under the same permissions and tunables.

Context-Inappropriate Capability

Medium

• Confidence: 79% confidence
• Finding: The tunables authorize broad discretionary trading behavior such as generic max position size, min trade, max open positions, and threshold-based execution, without any manifest-level restriction that the bot only trade the narrowly described cross-asset divergence opportunities. In a trading agent, this increases risk because the code can repurpose those broad controls to trade unrelated markets or pursue a materially different strategy than the user expects.

VirusTotal

66/66 vendors flagged this skill as clean.