axelar-gmp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). AxelarExecutable._execute (destination receiver) consumes the payload bytes delivered by Axelar relayers and then abi.decodes it, meaning outsider-authored free text can only reach the agent if it is carried inside an externally submitted cross-chain payload rather than being actively fetched/selected by the workflow.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly documents blockchain payment/transaction APIs and usage for moving value: it names IAxelarGasService and IAxelarGateway and includes example code calling gasService.payNativeGasForContractCall{value}(...) followed by gateway.callContract(...). It also discusses funding orchestrator/handler and destination proceeds — i.e., sending native gas and executing cross-chain contract calls (swaps/settles). These are specific crypto/blockchain execution primitives capable of moving funds, so this grants direct financial execution authority.