okx-ai

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors and consumes peer chat messages and task deliverables via A2A peer communication and intake leaves, which ingest outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly references specific financial execution capabilities and protocols, such as fund_a2mcp_token, confirm_a2mcp_payment, execute_a2mcp_payment, and handing payments over to the okx-agent-payments-protocol or handling exact-zero payments/escrow workflows. These are explicit, purpose-built financial and payment execution instructions rather than generic UI/browser interactions.