opensea

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow queries OpenSea marketplace data and events where outsiders can submit listings, offers, and item descriptions that are ingested by the agent.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes tools for querying NFT marketplace data (listings, offers, collection stats, sales, etc.) and executing Seaport trades (buying, selling, drops, and minting). Under the core rule, cryptocurrency/blockchain wallets, swaps, and token/NFT market orders (like buying/selling assets on Seaport) constitute Direct Financial Execution.