hiero-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs and demonstrates passing private keys inline (accountId:privateKey) in CLI commands and examples, which requires the agent to accept and emit secret values verbatim in generated commands — an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The x402 runtime workflow in references/x402.md fetches an outsider-controlled URL and ingests the PAYMENT-REQUIRED HTTP response header value (free text) to drive signing.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs the agent to perform HTTP GETs against https://api.example.com/data and to read the PAYMENT-REQUIRED header from that response (used at runtime to produce the x402 payment signature), so remote content at that URL directly controls the agent's subsequent commands.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is a CLI specifically for interacting with the Hedera blockchain and includes explicit transaction-creation and execution commands: HBAR transfers, token (FT/NFT) create/mint/transfer, swap execution, batch creation/execution, contract token transfers, and signing payment challenges. It also requires setting an operator via an accountId:privateKey. These are specific financial execution capabilities (sending value and signing transactions), not generic tooling.