bybit-trading

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads API response fields containing untrusted remote user input (such as order links, remarks, and P2P chat messages) without an explicit instruction-filtering mechanism.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The instruction mandates a background sub-agent self-update mechanism that uses curl to fetch scripts and instructions from an uncontrolled remote GitHub repository (raw.githubusercontent.com), constituting an unverifiable runtime external operational dependency with high risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is specifically designed for financial operations, providing a complete trading integration with the Bybit exchange. It contains explicit functions and market order execution paths (spot, derivatives, linear perpetuals, options, buy/sell orders, trading bots, and asset management) as well as API key configuration and request signing for executing real-world financial transactions.