compressed-token

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow includes “DeepWiki fallback” that asks mcp__deepwiki__ask_question against Lightprotocol/light-protocol, which can return outsider-authored repository text into the agent’s LLM context via the DeepWiki MCP tool.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for on-chain token operations on Solana: it exposes APIs and functions to create mints and token pools, mint tokens, transfer tokens (including delegated transfers), approve/revoke delegates, compress/decompress tokens, build/sign transactions and send them (e.g., createMint, mintTo, transfer, transferDelegated, buildAndSignTx, sendAndConfirmTx, etc.). It also expects a Solana keypair and RPC/API key, which are used to sign and submit transactions. These are specific crypto/blockchain financial execution capabilities (minting and moving tokens), not generic utilities.