base-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses web_request to ingest the Flaunch API endpoint https://mcp.flaunch.gg/v1/base/coins/new, which returns outsider-submitted token names, symbols, and descriptions without pre-selection.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill provides integration with a Base Account wallet via MCP (wallet-mcp.coinbase.com) supporting direct financial operations including sending, swapping, x402 payments, and token purchases across various plugins (e.g., Bitrefill, Moonwell, Uniswap). These direct financial operations are executed without independent access control enforced by the service layer at checkout or transfer time (delegating actions to user prompts/approval flags or the underlying tool calls).