helius-openapi-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly instructs the agent to call and parse live JSON from the public Helius Wallet API (https://api.helius.xyz) and to fetch the OpenAPI schema from https://raw.githubusercontent.com/holon-run/uxc/main/skills/helius-openapi-skill/references/helius-wallet.openapi.json, meaning untrusted third‑party responses are ingested and can materially influence subsequent tool use and decisions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires fetching the curated OpenAPI schema at runtime from https://raw.githubusercontent.com/holon-run/uxc/main/skills/helius-openapi-skill/references/helius-wallet.openapi.json, and that fetched JSON directly determines the agent/uxc CLI operation surface (i.e., controls available prompts/instructions) as a required dependency.