tres-asc845-swap-reprice-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow only reads outsider-authored free text that comes from the user-supplied --input JSON (Claude’s file containing TRES subTransaction results) in scripts/orchestrate_reprice.py and then passes it into build_reprice_plan in scripts/reprice_swaps.py for planning and preview.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly constructs and executes GraphQL mutations that modify accounting/ledger data (e.g., setManualFiatValue, setBatchManualFiatValue) and instructs the agent to run those mutations (after user confirmation). It also references functions to unlock/relock periods (deleteLockedPeriod, createLockedPeriod). Because these are specific, deliberate financial-data-changing operations (not generic browsing or generic HTTP calls), the skill grants direct financial execution authority over TRES Finance ledger entries.