lp-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow queries Meteora DLMM pool lists and details via public REST APIs and Gateway services, where attacker-influenced pool names or metadata could be ingested as free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The SKILL.md file documents a skill for running automated liquidity provision (LP) strategies and interacting with decentralized exchanges (DEXs) using the Hummingbot API and Gateway. Specifically, it includes tools for managing Solana wallets, adding private keys, configuring network RPC endpoints, opening and closing concentrated liquidity market maker (CLMM) positions on Meteora via automated scripts (manage_executor.py, manage_controller.py), and executing transactions on-chain. This falls directly under the "Crypto/Blockchain (Wallets, Swaps, Signing, Liquidity Provision)" category for Direct Financial Execution Authority.