hydrex

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches dynamic strategy data and Merkle proofs from Hydrex APIs (api.hydrex.fi and incentives-api.hydrex.fi), which provide external pool metadata and reward proof details consumed by the agent.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes interactions with Hydrex liquidity pools, locking HYDX for voting power, voting on pool strategies, depositing single-sided liquidity, and claiming/exercising rewards on Base. Crucially, it specifically mentions interacting with smart contracts and executing blockchain transactions via Bankr (e.g., locking tokens, voting transactions, claiming rewards, depositing into vaults, and exercising oHYDX requiring token payments), which falls under direct crypto/blockchain transaction execution.