solana-wallet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill ingests public, user-generated feeds (notably X/Twitter via x_search, x_get_mentions, start_x_strategy and a public pump.fun WebSocket indicated by PUMPPORTAL_WS) as part of its required scanner/strategy workflows, and those external messages are used to drive actions like auto-replies and trade/posts, which creates a clear channel for indirect prompt injection.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to control blockchain wallets and perform on-chain financial actions. It exposes commands and plugin tools for creating Solana and Polygon (EVM) wallets, transferring SOL, SPL tokens, MATIC, and ERC‑20 tokens, performing token swaps (Raydium swaps), and starting a Polymarket weather arbitrage scanner that can execute live trades (with a dry_run flag that can be disabled). It also requires wallet decryption and RPC endpoints. These are specific crypto/blockchain financial execution capabilities (sending transactions, swapping tokens, executing market actions), not generic tooling, so it grants direct financial execution authority.