basename-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill navigates to external web pages (Base names) and processes content from them during name registration, which represents low-risk ingestion of outsider-authored or public web content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates a direct financial transaction by signing and executing onchain cryptocurrency purchases (eth_sendTransaction transferring real ETH) to register domain names via WalletConnect, controlled solely by the agent holding a private key without independent service-layer access validation or human approval.