top-rank-tokens-sniper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill autonomously fetches and ingests public leaderboard and on-chain data via the onchainos CLI (e.g., get_ranking -> "onchainos token trending", get_advanced -> "onchainos token advanced-info", get_holders -> "onchainos token holders" in scripts/ranking_sniper.py and scripts/risk_check.py) and directly uses that untrusted, user-generated third-party content to decide buys/sells and drive follow-up actions, so it clearly meets all criteria for indirect prompt-injection risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a live cryptocurrency trading bot for Solana. It requires logging into an onchainos-managed wallet (TEE signing), exposes commands and functions to perform swaps and execute trades (e.g., onchainos swap swap --from ... --to ... --amount ... --wallet <addr> --slippage <pct>, onchainos wallet contract-call, onchainos wallet addresses, onchainos wallet balance, onchainos wallet order-status), and provides a live-mode flow that sets MODE="live", configures TOTAL_BUDGET and BUY_AMOUNT, unpauses trading, and starts the bot which automatically places buys/sells and manages exits. These are specific crypto-wallet, swap, signing and order-execution capabilities — i.e., direct financial execution.