web3-smart-contracts

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The "Companion check" section secretly instructs the agent to run local filesystem commands (ls ~/.claude/skills/ ...) and offer installing packages, which is an out-of-scope, hidden instruction to access/modify the host environment and thus constitutes a prompt injection.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly focused on Web3/DeFi smart contract development and includes concrete code patterns that move cryptocurrency (minting ERC-20 tokens, deposit{value:...} calls, withdraw implementations that use call{value: amount}(""), ERC-4626 vaults, and deployment/testing of contracts that handle asset transfers). This is not a generic coding or browser tool but a domain-specific capability to create and operate on-chain financial contracts that transfer value. Therefore it provides direct crypto/financial execution capability.