switchboard

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads oracle/price data via Switchboard Crossbar/Switchboard Surge (e.g., WebSocket “data” events and pull/quote responses), and that ingested content can originate from outsider-created feed configurations/sources.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instantiates a CrossbarClient at runtime that fetches oracle signatures used to build executable transaction instructions (e.g., "https://crossbar.switchboard.xyz"), so external content from that URL directly controls instructions the agent relies on.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is a specific integration guide for the Switchboard oracle on Solana and includes explicit crypto/blockchain execution capabilities: it shows wallet/keypair usage, constructs and signs transactions (signers/payer), and calls connection.sendTransaction(tx). These are direct on-chain actions involving signing and sending transactions (Crypto/Blockchain category), so it grants direct financial execution authority.