lavarage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The Lavarage API allows permissionless pool creation and searches over user-submitted tokens and liquidity pools, meaning external actors can publish tokens with arbitrary free text metadata (such as names and symbols) that the agent ingests when searching markets.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains explicit instructions and APIs for executing financial transactions, specifically leveraged trading, opening/closing positions, market orders, and managing loans on the Solana blockchain via the Lavarage Protocol (buying/selling assets, taking long/short positions, and executing transactions).