build-defi-protocol

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The preamble code defaults telemetryTier to "anonymous" and sends telemetry immediately (lines 4–16) while the document later instructs to prompt the user before collecting telemetry (lines 21–36), so telemetry collection is effectively performed without the promised opt-in, which is a hidden/deceptive behavior outside the skill's stated purpose.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about designing and building a DeFi protocol on Solana and includes crypto-specific dependencies and on-chain financial operations. It references handling "real funds", custody vaults, multisig for TVL, and core on-chain instructions that move value (deposit, withdraw, swap, borrow, repay). It also lists crypto SDKs (anchor-spl, pyth) used for token integration and price feeds. Because the skill's primary and explicit purpose is to create on-chain code that moves money, it constitutes Direct Financial Execution capability.