injective-usdc-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow includes runtime polling of Circle’s public iris API (outsider-authored JSON/text from https://iris-api.circle.com/...) which the agent would read into LLM context to proceed with mint/attestation/recovery.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains explicit, actionable instructions for moving value on-chain: it describes using EIP-3009 transferWithAuthorization with an app-owned relayer and server-side relayer checks (signing, submitting, and relaying USDC transfers), and it describes concrete CCTP bridge operations (approve TokenMessengerV2, call depositForBurn, poll Circle attestation, and call MessageTransmitterV2.receiveMessage). These are specific crypto/transaction APIs and flows to send/burn/mint USDC, so the skill grants direct financial execution capability.