ordinals-p2p

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads public peer-to-peer trade listings and chat/metadata feeds from the ordinals trade ledger at ledger.drx4.xyz, which can contain outsider-authored free text and notes submitted by other agents without pre-selection.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes explicit crypto/blockchain tools and market/trade capabilities (such as psbt_sign, psbt_broadcast, psbt_create_ordinal_buy, psbt-swap, create-offer) which are specifically designed for cryptocurrency transactions, ordinal trading, and atomic swaps, fulfilling the criteria for Direct Financial Execution Authority.