gas-war-sniper-teneo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow uses sdk.sendMessage(...) to query @gas-sniper-agent over a WebSocket and then ingests response.humanized/response.content into the agent’s LLM context; that response is generated from external chain data / third-party APIs (e.g., Etherscan V2 for contract), which are outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's Initialize SDK shows a runtime WebSocket connection to wss://backend.developer.chatroom.teneo-protocol.ai/ws which the agent uses to receive remote agent responses/instructions that directly control prompts and behavior, and the skill depends on that connection to operate.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly requires and uses a cryptocurrency wallet private key and configures paymentNetwork/paymentAsset (USDC contract addresses) in the TeneoSDK. It states "Payments are handled automatically in USDC" and advertises monetization/charging for services on specific chains (Base, Peaq, Avalanche). These are explicit crypto payment/signing capabilities (wallet signing + token contract addresses) that enable moving money — not merely generic API or browsing tools.