distribute-tokens

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads merged pull requests from GitHub via gh api search/issues and search API queries, which ingest outsider-authored PR metadata and titles/descriptions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains explicit financial execution capabilities via the Bankr Wallet API, specifically performing blockchain/crypto token transfers (/wallet/transfer), checking balances (/wallet/portfolio), and handling wallet integration and token distribution.