binance-onchain-copy-trader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads real-time trades and smart-money signals from an external WebSocket feed (baw tracker ws) which can ingest outsider-submitted transactions and signals.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly details capabilities and CLI commands for market orders, limit orders, swaps, and on-chain trade execution ("baw market-order swap", "baw limit-order buy/sell"), which provide direct financial execution authority for executing crypto trades and managing funds.