zap-fast

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow queries public APIs (KyberSwap Earn and Token APIs) and processes unauthenticated API responses containing outsider-contributed pool/token metadata.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains explicit functionality for building and executing blockchain transactions ("zaps" into DeFi liquidity pools) using shell scripts and Foundry commands (cast send/broadcast), which constitutes Direct Financial Execution via crypto/blockchain wallet interactions and market/liquidity execution.