trading-on-uniswap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow ingests search results from DexScreener via curl, which parses arbitrary public pair data and descriptions containing outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains specific instructions and commands for executing token swaps, interacting with Uniswap V2 and V3 contracts, and performing crypto transactions on the Abstract blockchain via the AGW CLI (agw contract write --execute and agw tx calls). This falls directly under crypto/blockchain operations and market orders/swaps, which is classified as Direct Financial Execution.