cad-reference

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill workflow relies on reading CAD documents from a public documentation site at runtime (URLs in SKILL.md), which is outsider-authored free text that could include indirect prompt-injection content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The document is an index of Convex CADs that explicitly cover blockchain financial components: accounts/addresses/controllers, transactions, tokenomics, a fungible token standard, Torus DEX (a decentralized exchange), keystore, and HD wallets. These are specific crypto/financial capabilities (wallets, DEX, transaction formats/flow, token standards), not generic tooling, and therefore indicate the skill is designed to enable direct financial execution on a blockchain platform.