rwa-alpha

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent skill fetches and processes financial news headlines from Google News RSS and prediction market data from Polymarket API during its perception loop.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a direct financial workflow (on-chain token trading and DEX swaps via OKX / onchainos CLI commands) with qualifying independent/service-layer checks and explicit multi-gate user confirmation protocols (including wallet status, session modes, previews, and typed confirmations) documented for live transactions.