swap-execute-fast

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow executes external API calls to the KyberSwap Token API and Aggregator API to fetch token metadata and swap routes, which ingest outsider-controlled token names, symbols, or market data at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains explicit crypto/blockchain transaction signing and execution capabilities, specifically for executing token swaps via scripts that broadcast transactions using Foundry (cast) or wallet keys/keystores without requiring manual wallet confirmations.