limit-order

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches token search results and honeypot/fee-on-transfer info from KyberSwap and CoinGecko APIs, and reads user-specified tokens and orders via WebFetch, exposing the agent to potential indirect prompt injection.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly contains instructions for executing financial transactions—specifically creating, querying, and canceling market limit orders via the KyberSwap Limit Order API across 17 EVM chains, including signing EIP-712 messages and constructing on-chain cancellation transactions.