drift

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The guide's code examples include direct in-code secret/key placeholders (e.g., Keypair.fromSecretKey(/* your secret key */) and Keypair.from_bytes(secret_key_bytes)), which encourage embedding private key material verbatim in code/output and therefore require the LLM to handle secret values directly.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow shown in the Drift trading bot template subscribes/fetches account and event data from Solana RPC and then processes it, which can include on-chain/user-authored fields (e.g., vault/user names, order/event metadata) into the bot’s logic.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The SKILL.md describes a specific crypto trading SDK (Drift Protocol) with concrete APIs that perform financial actions: creating a wallet from a secret key, placing perp/spot market and limit orders, placing multiple orders atomically, depositing and withdrawing tokens, transferring deposits between sub-accounts, executing Jupiter swaps through the SDK, settling PnL, and signing/submitting off-chain order messages. These are explicit, purpose-built blockchain/crypto financial operations (sending transactions, moving funds, and signing orders), not generic tooling — therefore the skill grants direct financial execution capability.