swap-approve

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow queries the KyberSwap Token API via WebFetch if a token is not found locally, which fetches outsider-authored metadata and descriptions from the web.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly contains instructions and code examples for executing blockchain/crypto transactions, specifically managing ERC-20 token approvals via Foundry's cast send commands and ethers.js scripts. This falls under the Crypto/Blockchain category of Direct Financial Execution Authority.