publish

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The skill contains instructions and documentation for publishing user-generated files and folders to the Filecoin network via the filecoin-pin CLI, and it is a financial-related skill due to its core integration with Filecoin cryptocurrency wallets, USDFC tokens, storage billing, lockups, deposits, and automated funding caps.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill publishes files and folders to Filecoin mainnet via the filecoin-pin CLI tool, supporting storage setup, balance checks, deposits, and auto-funding options (such as --auto-fund and --max-balance) which operate real financial balances (USDFC and FIL) for storage execution. This constitutes a direct financial operation (purchasing/funding/settling data storage and deposits). For access control, the workflow uses a CLI-saved login authenticated via a session key or owner key. However, the documentation notes that funding, deposits, and manual setup can occur via owner keys and interactive console authorizations where funds are moved and auto-funded without an independent, service-enforced verification check on the agent's instructions other than session keys or wallet signatures. Therefore, it falls under direct operations without established independent access control.