starknet-wallet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill actively fetches token metadata and on-chain data from public third-party sources (e.g., @avnu/avnu-sdk's fetchTokenByAddress/fetchVerifiedTokenBySymbol calls in scripts/check-balance.ts and scripts/check-balances.ts and RPC calls via STARKNET_RPC_URL described in SKILL.md), and the agent directly uses that untrusted data (token addresses, decimals, quotes) to drive transfers, swaps, and contract invocations, so third-party content can materially influence actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a Starknet wallet designed to move crypto assets. It defines tools and APIs for sending tokens (starknet_transfer), executing token swaps (starknet_swap, starknet_get_quote, AVNU integration), invoking state-changing contract functions (starknet_invoke_contract, multi-call, approve/transfer), and estimating/ paying fees (paymaster/gasless modes). It requires account private keys and RPC endpoints and supports session keys for autonomous (pre-approved) transactions. These are specific crypto/wallet operations (not generic tooling) that can directly execute financial transactions on-chain.