solana-tx-building

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow fetches and decodes on-chain Solana transactions via RPC calls (getTransaction), which can contain arbitrary outsider-authored program data, memo strings, or log messages.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains explicit crypto/blockchain functionality, specifically for constructing, simulating, and managing Solana transactions, including building instruction data for SOL transfers, SPL token transfers, Associated Token Accounts (ATAs), and interacting with decentralized exchange routing (Jupiter swaps). This falls under Direct Financial Execution capabilities (Crypto/Blockchain).