gate-dex-wallet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads external URLs and HTTP payloads via dex_tx_x402_fetch, which consumes outsider-authored free text without pre-filtering or sanitization.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill documentation instructs the agent to fetch external instructions and rules from a remote GitHub URL (https://github.com/gate/gate-skills/blob/master/skills/gate-runtime-rules.md), constituting an inbound operational runtime dependency on an external repository.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes tools and capabilities explicitly designed for blockchain wallet operations, token transfers, withdrawals, on-chain transaction signing, and cryptocurrency payments (x402 protocol). These functions fall squarely under crypto/blockchain financial execution capabilities (signing transactions, sending USDT, withdrawing assets).