yield-optimization

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent retrieves yield opportunities, schemas, and portfolio data from yield.xyz via API scripts, which constitute public web/platform data fetching rather than monitored outsider-authored submission feeds.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains specific tools and CLI commands for crypto/blockchain wallet operations, signing and broadcasting transactions, buying tokens with fiat, bridging tokens, and managing virtual accounts for onramps/offramps via MoonPay. These are explicit direct financial execution capabilities meeting the criteria for Risk 1.