distribute-tokens

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path reads outsider-authored free text indirectly by calling the Bankr Agent API with user-controlled ${HANDLE} (from memory/distributions.yml / @login), ingesting the agent’s job result text to extract an address during B3 handle→address RESOLVE.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to move money: it implements on-chain token distributions using the Bankr Wallet API, requires a write-capable BANKR_API_KEY, and contains concrete transfer calls (/wallet/transfer) plus preflight balance and idempotency logic. This is a specific financial execution integration (crypto wallet transfers), not a generic capability.