helius

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow involves reading Solana blockchain data, transactions, webhooks, and logs via Helius infrastructure, which can ingest outsider-submitted transactions, smart contract data, and external feeds.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes tools and capabilities for interacting with the Solana blockchain via Helius infrastructure, including explicit mentions of crypto/blockchain transaction sending (transferSol, transferToken, transaction signing/sending tools, and managing crypto wallet funding/signing for API subscriptions). This explicitly grants Direct Financial Execution Authority as defined by the crypto/blockchain rules (Wallets, Swaps, Signing, Transactions).