wallet-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow consumes outsider-authored free text from GitHub issues and PRs via the required GitHub skill integrations.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill provides access to a Coinbase Wallet Account supporting direct financial operations such as sending tokens, swapping, x402 payments, and executing transactions across multiple chains, as well as plugins for trading, lending, and purchases. Independent access validation is handled by the underlying Wallet MCP server and authenticated Coinbase/SIWE sessions (or user-approved signatures), which constitute qualifying external validation. This places the direct payment operations in the medium severity tier.