web3-data

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs users to set API keys and a private key via direct CLI commands (e.g., chainbase config set api-key YOUR_KEY and chainbase config set private-key 0x...), which requires embedding secret values verbatim in command text and therefore creates a high risk of secret exposure/exfiltration.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes—at runtime the required workflow executes chainbase tops ... and ingests outsider-authored free text from Twitter/X (e.g., tweet text / summary) into the agent’s context via the CLI’s JSON/text output.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly supports blockchain payments and transaction execution: it documents an "x402" pay-per-call micropayment mode that requires setting a private key (chainbase config set private-key 0x...), and it exposes a "contract call" command for calling smart contract functions. These are specific crypto/blockchain capabilities that enable signing and sending on-chain transactions (i.e., moving funds or invoking state-changing contract methods), so this grants direct financial execution authority.