ordinals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches inscription content and transaction details from the mempool.space API (ordinals.ts get-inscription), which allows arbitrary transactions containing outsider-authored inscription data/payloads to be read by the agent.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly contains tools and subcommands for blockchain/crypto operations, specifically creating Bitcoin inscriptions, broadcasting commit and reveal transactions, transferring inscriptions, and managing wallet interactions requiring funds. This falls under the "Crypto/Blockchain (Wallets, Swaps, Signing)" category of Direct Financial Execution Authority.