0xwork

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses the 0xwork CLI to discover and read task descriptions, requirements, and comments from the decentralized marketplace on the 0xwork platform, which are authored by untrusted external users.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs installation of an npm package from npmjs.com via npm install -g @0xwork/cli@latest, constituting an operational dependency on an unverified third-party CLI package.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes tools and commands for interacting with the 0xWork decentralized marketplace on the Base chain, which specifically includes crypto wallet signing, handling USDC escrow, buying and selling products, staking tokens, and managing bounties and payments. These are explicit cryptocurrency, token, and payment gateway/smart contract execution capabilities designed for financial operations.