vertex

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the streaming/subscription runtime path, the SDK client receives and ingests free-form JSON fields from the Vertex WebSocket subscriptions feed (e.g., /v1/subscribe) and passes them to user handlers like on_message, which an outsider can influence by submitting trades/orders.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a trading client/SDK for Vertex Protocol and exposes direct financial execution functions: creating a client with a private key, placing/cancelling/replacing orders (spot and perp), approving and depositing collateral, withdrawing collateral, linking signers, and submitting trigger orders. These are specific APIs to move funds and execute market transactions (not generic tooling), so it grants direct financial execution authority.