ctoken

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow queries the public Inco cToken indexer REST API for token lists, activity, and wallet assets, which returns JSON data containing token metadata and transaction summaries from the blockchain.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill specifically integrates Inco's Confidential Token SDK (@inco/ctoken), which explicitly provides blockchain-level financial execution functions such as wrapping, unwrapping, and confidentially transferring tokens on-chain (client.deposit, client.confidentialSend, client.withdraw). These tools directly manage cryptographic signing and financial asset movement.