wallet-tracker-mcap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors external target Solana wallets via onchainos portfolio token balances and ingests token metadata, prices, and trades, which are outsider-controlled on-chain assets and feeds.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates a direct Solana crypto copy-trading bot (wallet-tracker-mcap) that executes on-chain swaps and contract calls (onchainos swap swap, onchainos wallet contract-call) via an Agentic Wallet with TEE signing. Although configuration rules and confirmation gates are documented (e.g., PAPER mode default, typed confirmation strings like confirm live trade), these instructions-only prompt rules do not constitute independent execution-layer access control enforced by the service or runtime.