midnight-rpc

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow is an RPC interface where external clients (dApps/wallets/explorers/services) send JSON-RPC requests over HTTP/HTTPS or WebSocket, so outsider-authored free text (request parameters/strings) can be ingested into the node’s RPC handling and thus into the agent/LLM context if the agent relays or summarizes those inputs.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The RPC skill explicitly states it enables "Submitting transactions (state transitions)" and is an interface used by dApps/wallets and services to interact with a blockchain node. That capability (submitting on-chain transactions / state transitions) is a direct crypto/financial execution capability. The doc also references related transaction-submission functionality (midnight-transactions) and partnerchain cross-chain operations, reinforcing that this RPC layer can be used to move on-chain assets.