starchild-swap-and-bridge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime reads outsider-authored free text when the workflow ingests LayerZeroScan transaction data/step statuses for polling and when it surfaces error/rejection reasons from LayerZero API responses, which ultimately depend on dynamic, potentially user-influenced on-chain/quote content rather than solely trusted first-party docs/API schemas.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform cryptocurrency financial operations: it builds and executes swaps and cross-chain bridges, calls exchange/bridge APIs (WOOFi, LayerZero), constructs transactions, performs approval flows, signs EIP-712 payloads, and sends transactions/submits signatures. It includes concrete API endpoints and code examples for quoting and proxied POSTs, detailed execution sequencing (send approval tx, wait for confirmation, rebuild and send swap/bridge tx), and verification of on-chain receipts — i.e. it is explicitly intended to move crypto funds.