@3073/virtual-trading

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly reads and lists public, user-generated forum content from https://degen.virtuals.io via dgclaw.sh forums / dgclaw.sh posts (see "Forum base URL" and "List forums or read posts" in SKILL.md) and uses forum signals/threads as part of its trading and leaderboard workflow, so untrusted posts could influence agent decisions and tool use.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly and specifically designed to execute crypto financial operations. It includes direct instructions and tools for depositing USDC, creating and funding ACP jobs to transfer funds, configuring Hyperliquid API wallets, using an API wallet private key with the @nktkas/hyperliquid SDK, opening/closing/modifying perpetual positions (market and limit orders), checking balances, and withdrawing USDC (building and signing withdrawal transactions via ACP master wallet). It references concrete payment/money-moving endpoints and scripts (e.g., scripts/trade.ts open/close/modify, scripts/withdraw.ts, acp client create-job / fund, HL_API_WALLET_KEY, Hyperliquid API URL), so its primary purpose is to move/manage funds/trades rather than being a generic tool. Therefore it grants Direct Financial Execution Authority.