copy-trading

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow monitors external Solana blockchain transactions via API endpoints (SolanaTracker, Helius, DexScreener) which can be influenced by third-party smart contract data and token metadata.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes a copy-trading framework for Solana DEX trading. It explicitly references executing trades via the Jupiter aggregator (jupiter-api / jupiter-swap), managing market orders and token swaps on-chain ("execute proportionally-sized trades", "Execute via Jupiter aggregator with appropriate slippage tolerance"), which falls under Direct Financial Execution Authority (market orders/crypto swapping capabilities).