blockchain-developer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's docs and examples (e.g., references/web3-testing.md showing vm.createSelectFork with a public MAINNET_RPC_URL/Alchemy endpoint and instructions to "connect to existing mainnet contracts", plus references/nft-standards.md using ipfs:// metadata URIs) require fetching and interpreting public, user-hosted on-chain and IPFS content, which is untrusted and can materially influence actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly focused on blockchain and DeFi development and includes concrete financial-execution capabilities: multi-signature and smart-wallet implementation, Web3 wallet integration (MetaMask, WalletConnect), AMMs/DEXs, lending protocols, flash loans/arbitrage, staking/validator operations, cross-chain bridges, treasury management and custody integrations. These items entail creating and signing on-chain transactions and moving value. This matches the "Crypto/Blockchain (Wallets, Swaps, Signing)" criteria for Direct Financial Execution.