debridge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In templates/bridge-client.ts, the client fetches arbitrary free-text error bodies from an external service at DLN_API via res.text() (on non-OK responses) and includes that text in thrown Error messages, which the runtime LLM would ingest if it is integrated with this skill’s error/exception handling.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The SKILL.md documents an SDK whose primary purpose is moving cryptocurrency value across chains. It contains explicit functions and examples that create and invoke cross-chain token transfer instructions (e.g., invoke_debridge_send, invoke_debridge_send_signed, send_with_external_call), fee-handling for token/native fees, and a TypeScript client that builds and submits send transactions. These are direct crypto/blockchain transaction APIs (wallet/transfer/bridging) — i.e., direct financial execution capability.