souldinals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent fetches on-chain inscriptions owned by the wallet from the Unisat Ordinals API (fetchSoulInscriptions), which can contain attacker-authored markdown content parsed into agent context via load-soul and display-soul after searching the wallet's UTXOs/inscriptions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill makes runtime API calls to the Unisat service endpoint (https://open-api.unisat.io) for indexing and fetching ordinals data, which is an external dependency with third-party/unknown provenance.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes explicit crypto/blockchain functionality, specifically broadcasting commit and reveal transactions on Bitcoin L1 (inscribe-soul, reveal-soul) which handle wallet balances and involve spending satoshis to create inscriptions.