delphi

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/agent-tui/data.ts, the TUI’s runtime fetches Delphi market metadata fields like metadata.question (and outcomes) via DelphiClient.listMarkets(...) / DelphiClient.getMarket(...), and those metadata strings can originate from permissionless, outsider-created markets before being rendered as free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill exposes explicit on-chain trading and wallet-signing operations: buyShares/sellShares (on-chain txs returning transactionHash), redeemMarket/liquidate (state-changing redemption/liquidation txs), token approval/ensureTokenApproval (sends approval txs), and requires signer credentials (WALLET_PRIVATE_KEY or CDP server wallet keys). These are specific crypto/blockchain transaction APIs that can move funds and sign transactions, so the skill grants direct financial execution authority.