SunSwap DEX Trading

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow invokes sun --json ... commands (e.g., swap:quote, pool search, token list, position list) that fetch/return market data from external SunSwap/SUN.IO endpoints, so the CLI’s stdout (JSON converted to text by the agent) can include outsider-authored free text that becomes part of the agent’s LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for interacting with a blockchain DEX and includes commands that perform on-chain financial actions: swap execution, liquidity add/remove/mint, and arbitrary contract sends. It requires wallet credentials (TRON_PRIVATE_KEY / TRON_MNEMONIC / AGENT_WALLET_PASSWORD) and shows example commands using --yes to send transactions. These are specific crypto/blockchain transaction capabilities (wallet signing and sending), which constitute Direct Financial Execution Authority.