recover-eco-funds

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill queries the Eco intent status API (https://quotes.eco.com/api/v3/intents/intentStatus), which returns third-party quote and intent metadata influenced by external actors.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill executes direct financial operations (self-refunds and EOC-3009 USDC transfers/sweeps) via custom helper scripts (eco-self-refund.mjs and eoa-to-sca.mjs) using agent-controlled CLI tooling and wallet execution. Although the documentation outlines safety checks, warnings, and manual approval prompts for the agent to follow, these rely entirely on the agent following instructions rather than an independent authentication or authorization mechanism enforced by the execution layer or service API. Therefore, it is a direct financial operation without qualifying independent control.