coinbase-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads external x402 research catalog resources and paid content via coinbase_x402_resources and coinbase_x402_fetch, which ingest outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill connects to Coinbase MCP to route remote tool workflows including trading, conversions, transfers, and payments. These are direct financial operations. Independent access control is established via native OAuth and user sign-in/approval through the harness (SKILL.md:3, SKILL.md:23-24).