binance-web3-openapi-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent retrieves public token metadata, search results, and security audits from the Binance Web3 API, where external token descriptions or search results may contain outsider-authored text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references an external GitHub repository raw URL for setup and schema retrieval (https://raw.githubusercontent.com/holon-run/uxc/main/skills/binance-web3-openapi-skill/references/binance-web3.openapi.json), which introduces a common/reputable unofficial operational dependency.