eve-frontier-chain

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's required workflow reads and acts on public, user-generated chain and game data (e.g., SuiClient.getCoins / RPC usage and the RPC_URL in ChainSettings, plus reputation computed from external "killmail" data via compute_combat_honor) so the agent ingests untrusted third‑party content that can materially influence gate/access decisions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes blockchain token operations and transaction-building/sending capabilities. It contains Sui SDK code to read balances and to "Transfer tokens between wallets" (buildTransfer creating a Transaction and transferring objects), zkLogin patterns for deriving wallet addresses, and configuration for a deployer_private_key (env var) used for on-chain deployment/signing. These are specific crypto/wallet transaction tools (wallet operations and transaction construction/signing), which meet the "Crypto/Blockchain (Wallets, Swaps, Signing)" criterion for Direct Financial Execution.