viem

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow (templates/client-setup.ts), the agent reads outsider-authored free text from the blockchain RPC/event stream via watchContractEvent/readContract/getLogs callbacks and decoded revert reasons returned as strings, without selecting a specific trusted item first.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The SKILL.md documents viem's wallet & transaction APIs: it shows creating a WalletClient and accounts (privateKeyToAccount), and examples that sign and send transactions (sendTransaction, writeContract, deployContract, approve/swap pattern). These are specific crypto/blockchain execution primitives that can move funds on-chain (signing and broadcasting transactions), so this grants Direct Financial Execution capability.