blockrun

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow includes real-time X/Twitter and web search via Grok's Live Search API, which ingests outsider-authored posts and web content based on active queries.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes "BlockRun," which incorporates a cryptocurrency wallet that automatically pays per token or per action (micropayments using x402) for LLMs, image generation, and search capabilities. It includes explicit capabilities for handling an on-chain USDC wallet (setup_agent_wallet(), client.get_balance(), client.get_wallet_address(), etc.). This constitutes crypto/blockchain wallet functionality and direct financial execution for paying for API services.