crypto-desk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests outsider-authored free text only via a “news/narrative” subagent that scans latest catalysts, which implies it reads arbitrary external postings from third parties at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly lists an execution connector named "coinbase-cdp-connector" (a specific Coinbase crypto execution integration) under Wiring/Execution. That is a crypto-exchange connector (wallet/trading execution capability) — a specific tool for crypto financial operations — which meets the "Crypto/Blockchain (Wallets, Swaps, Signing)" criterion for Direct Financial Execution even though the doc elsewhere emphasizes "notification-first".