bingx-rsi-bottom-hunter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill fetches kline data from BingX public API endpoints (GET /openApi/swap/v3/quote/klines) at runtime; this is outsider-authored free-form text (JSON response body) that is parsed and fed into the agent’s LLM context via the strategy outputs.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to execute crypto market orders on an exchange. It includes signed API calls (fetchSigned) and documents endpoints for placing and cancelling orders (/openApi/swap/v2/trade/order POST = place market buy order, DELETE = cancel order), checking balances, and setting SL/TP. Step 5 describes calling account/trade APIs to place market buys and conditional orders. These are direct market-order / trading capabilities (moving funds), not generic API or browser actions.