coinbase-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to search and pay for curated research resources via x402, which involves fetching content from external URLs/services.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents direct financial operations including trading, conversions, portfolio transfers, and paid research via the Coinbase CLI (SKILL.md:82-90). These operations authenticate via CDP API keys and require independent service-layer validation (SKILL.md:8, 33-35), qualifying for medium severity due to independent access control.