paragraph-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to read posts, feed items, and user content from the Paragraph API, which may contain outsider-authored text submitted by public users on the publishing platform.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents API integration for Paragraph.com, which includes coin operations (buying and selling coins onchain using viem, SKILL.md:373-384). This constitutes a direct financial operation (trades/swaps/purchases). However, the operations require external programmatic authentication and authorization objects (walletClient and account), and token/coin transactions are governed by independent wallet signing and onchain validation rather than trusting bare agent instructions. Therefore, the direct financial operation possesses qualifying independent execution/service-layer access control via viem wallet signing.