SunPump Meme Token Toolkit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow interacts with SunPump meme token creation and trading via sun-cli, querying token metadata, rankings, and holder lists where text descriptions and metadata fields are retrieved from the SunPump API.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill provides documented operational routes for direct financial actions (swapping tokens via sun swap and buying/selling meme tokens on the bonding curve via sun sunpump buy/sell), which execute real-money transactions on the TRON blockchain using local wallet credentials (TRON_PRIVATE_KEY). While instructions recommend agent confirmation steps and previews, these are agent guidelines rather than independent access controls enforced by the service or execution layer. Consequently, the direct financial operation lacks qualifying independent access control.