tres-explorer-tx-to-ledger

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s Step 1 fetches an outsider-authored blockchain explorer page (via WebFetch) and ingests untrusted free text from it to extract fields like timestamp, function/method name, token transfers, and addresses before building the ledger mutation.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill is explicitly designed to create financial ledger entries for blockchain transactions. It parses blockchain explorer data and then calls the TRES MCP GraphQL mutation createManualTransactionWithSubTransactions (via the execute tool) to write transactions and sub-transactions into the finance ledger. Because it directly performs ledger write operations for crypto-related transactions, it constitutes Direct Financial Execution authority.