deepbook-predict

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow queries the public prediction market server via fetch to retrieve oracle data, which is an external source of untrusted free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill describes DeepBook Predict, a prediction market protocol on Sui where applications establish markets and users take binary or vertical range positions, deposit DUSDC, mint/redeem positions, and supply or withdraw liquidity (PLP). These actions constitute a direct financial operation (trades, purchases, and settlement authorization) on a testnet environment. As the documentation covers smart contracts and SDK building guidance rather than an agent-operated wallet with independent access control enforcement, the direct financial operation lacks established qualifying control.