insider-wallets-finder

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt embeds API keys and tokens directly into curl commands and script variables (e.g., apikey=YourKey, -H "X-API-KEY: your-birdeye-key", API_KEY = "YourEtherscanKey"), which would require the LLM to output secret values verbatim when generating runnable commands—an insecure pattern.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow calls multiple runtime HTTP APIs (e.g., Etherscan tokentx/txlist, Uniswap v3 subgraph swaps, OpenSea events, Arkham address intel, Birdeye txs/holders), and the LLM would ingest the returned JSON fields (free-form text like addresses/labels/metadata) from these outsider-authored public web sources into its context.