starter-coach

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The skill contains instructions and code for building and running automated cryptocurrency trading bots on OKX DEX, which involves financial transactions and cryptocurrency trading.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates a trading bot builder and execution assistant that guides users through deploying and executing real-money cryptocurrency trades via the OKX DEX using OnchainOS CLI (oc.swap_execute). This is a direct financial operation (crypto asset purchases/trades/settlements). Although the skill uses API integration, requires user confirmation prompts ("Never auto-deploy without explicit user consent", SKILL.md:232-232), and discusses verification steps, there is no independent access validation or service-enforced authentication check documented for the actual payment/execution route itself—execution relies solely on the agent following instructions and calling oc.swap_execute upon user agreement. Therefore, this qualifies as a direct financial operation without established qualifying independent access control, resulting in a high severity rating.