top-rank-tokens-sniper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors ranking leaderboards and external token data from OKX/Solana via the CLI, where token metadata and metadata fields contain outsider-authored free text ingested during the scanner loop.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates a direct financial token-sniping trading bot using on-chain swaps via the onchainos CLI. It relies on user configuration (paper vs live mode) and documented TEE wallet status/login for signing, but no independent server-side authentication check prevents the agent from executing trades once the local agentic wallet session is initialized.