bybit-trading

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow consumes outsider-authored free text from Bybit P2P chat messages via modules/fiat.md.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill contains an operational instruction to fetch and execute an external remote script (modules/oauth.js) from GitHub via raw.githubusercontent.com during runtime setup, which constitutes a weak/unknown/suspicious runtime external dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill provides instructions and operational routes for trading crypto spot, perpetuals, options, and earn products on Bybit via natural language using API keys or OAuth credentials, constituting direct financial operations (purchases, trades, transfers). Access control relies entirely on the user supplying valid API credentials or completing an OAuth authorization flow, without independent service- or execution-layer access control enforced outside the agent's control.