hodlmm-signal-allocator

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The skill performs financial token swaps and yield allocation on mainnet using user-provided funds and private keys, which requires critical classification due to dealing with cryptocurrency transactions.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads outsider-authored content via the aibtc.news signal feed (AIBTC_SIGNALS_API), which ingests external community macro signals into the runtime execution workflow.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The script fetches behavior-selecting configuration and dynamic data from an arbitrary Cloudflare Worker URL (quantum-power-map.p-d07.workers.dev) whose ownership, publisher provenance, and distribution integrity cannot be verified, representing a high-risk external dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains explicit capabilities and tools for executing blockchain and cryptocurrency swaps (Bitflow swap STX to sBTC) and requires wallet signing and mainnet fund management. This falls directly under crypto/blockchain financial execution.