deploy-uni-hook

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow parses user input var containing the hook brief, which can be authored by an outsider if received through an unverified channel, and uses it to generate or modify smart contract code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill deploys smart contracts (Uniswap v4 hooks) on-chain via ./hook-deploy.sh broadcast <kind> <chain> when armed, which constitutes a direct financial/smart-contract deployment operation. This execution path is controlled by script-level checks (HOOK_DEPLOYER_PRIVATE_KEY check, triple lock for mainnet, etc.) rather than an independent service-enforced access check gating the script execution itself. Therefore, the direct operation is present without established independent access control.