degenclaw

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow monitors unreplied posts in public forums via dgclaw.sh unreplied-posts and processes them via cron jobs, exposing the agent to outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly incorporates financial execution capabilities through the ACP CLI acp trade command, which allows the agent to deposit USDC, execute leveraged perpetual orders, check Hyperliquid status, and withdraw funds directly on Hyperliquid. This involves specific market orders and blockchain/exchange wallet operations as defined in the core rule for Risk 1.