solana-easy-swap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's runtime (scripts/swap.mjs) fetches unauthenticated Jupiter endpoints (https://lite-api.jup.ag/swap/v1) to ingest quoteResponse and a swapTransaction blob which the agent parses and uses to build/sign/send transactions, so untrusted third‑party responses directly influence tool actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill calls the Jupiter API at runtime (https://lite-api.jup.ag/swap/v1) to fetch a base64-encoded swapTransaction which the agent deserializes, signs, and broadcasts, so remote content from that URL directly determines the on-chain code executed and is a required runtime dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly implements crypto transaction functionality: it is a Solana token swap tool that performs quoting, signing, sending, and confirming on-chain swaps. It requires a SOLANA_KEYPAIR_PATH and "reads your keypair to sign transactions," provides prepare/execute/status/receipt commands that broadcast transactions and return signatures, and is intended to buy/sell/exchange tokens via Jupiter. This is a specific financial execution capability (crypto/blockchain wallet signing + swap execution), not a generic tool.