compressed-pda

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow has the client fetch ZK validity proofs from an RPC provider (getValidityProofV0 / get_validity_proof), and that RPC response is untrusted outsider-provided free-form data that is ingested into the agent’s LLM context via the tool/agent’s handling of the proof/instruction-building inputs.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about building Solana programs that create, update, close, burn, and manage compressed PDAs via CPI to the Light System Program and references SPL token airdrop/claim and token distribution examples (including "compressed tokens decompressed to SPL on claim"). It references blockchain SDKs (light-sdk, light-client), CPI calls that effect on‑chain state changes, and use of a payer keypair and RPC keys. These are specific crypto/blockchain transaction capabilities (on‑chain token/account operations), so this grants direct financial execution authority in the crypto domain.