intuition

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow queries an Intuition GraphQL discovery endpoint where outsider-authored graph content (labels and metadata) is ingested by the agent.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly teaches the AI agent how to construct and execute on-chain transactions for the Intuition Protocol, including generating calldata and managing assets for creating atoms, triples, and depositing into or redeeming from financial vaults using the $TRUST cryptocurrency (market/blockchain transactions). Therefore, it grants Direct Financial Execution Authority (Crypto/Blockchain: Wallets, Swaps, Signing, Transactions).