cosmos-sdk-expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and references/README.md explicitly direct the agent to consult community-maintained public resources (e.g., the Awesome Cosmos README, cosmos/chain-registry, Cosmos Directory and various GitHub/docs links), meaning the agent is expected to fetch and interpret untrusted third-party web content that can materially influence tool selection and next actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly targets the Cosmos blockchain ecosystem and names concrete crypto tooling used to sign and broadcast chain transactions and manage keys/funds: e.g., CosmJS, cosmpy, cosmrs (client libraries), wallets/cosmos-kit, multisig workflows, and key custody (tmkms). These are not generic helpers but specific blockchain/wallet/key-management components whose primary purpose is creating/signing/sending on-chain transactions and controlling funds. Therefore it grants direct financial execution capability.