wallet-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads external data from api.bankr.bot, api.bitrefill.com, mcp.brickken.com, www.clawn.ch, and mcp.flaunch.gg via web_request or custom API calls without an explicit pre-selection step.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill provides access to a Coinbase Wallet account capable of sending and swapping tokens, executing batched contract calls, and interacting with third-party DeFi plugins for financial transactions such as trading, lending, and purchasing. These constitute direct financial operations (transfers, swaps, purchases, trades). However, the skill explicitly relies on user review/approval workflows and user-initiated signing, and defers execution and access checks to the Wallet MCP and underlying wallet infrastructure rather than implementing independent service-level authentication or validation of its own within the skill text itself.