compose-bitcoin-oracle

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime workflow reads outsider-authored free text by scraping CoinGecko response content inside src/tasks/bitcoin-oracle.ts (fetches BTC/USD and then converts the returned fields into on-chain writes).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's local CLI scaffold steps fetch remote repository content at runtime (via degit: goldsky-io/documentation-examples/compose/bitcoin-oracle#6abe62878cb92f2569538ba9572b049ed5949a01 and via git clone: https://github.com/goldsky-io/documentation-examples.git), and that fetched repository supplies code/templates that the workflow will run or deploy and is a required dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly performs blockchain transactions: it creates/uses Compose-managed wallets, deploys contracts, signs and sends on-chain writes (evm.contracts.PriceOracle.write), and instructs sending native gas to the wallet. These are specific crypto/blockchain execution capabilities (wallets, signing, and transmitting transactions), so it grants Direct Financial Execution Authority.