strategy-ranking-sniper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The skill documents a Solana token trading and ranking sniper bot strategy using OKX DEX, which involves financial transactions and automated cryptocurrency trading within a specialized trading assistant plugin.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow continuously fetches trending token rankings and market metadata from OKX API endpoints, where external token metadata and descriptions can contain arbitrary outsider-authored text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents a Solana token ranking sniper bot (strategy-ranking-sniper) that executes direct financial operations (buying and selling tokens via DEX swaps and routing through OKX aggregator and Solana on-chain execution).

Authentication and access control are handled via the onchainos CLI and TEE-secured wallet signing (as specified in SKILL.md:149-150: "OKX API: Handled by onchainos CLI internally

• Solana Wallet: onchainos wallet (TEE signing)"). This independent service/execution layer establishes qualifying access control for direct operations.