wdk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses web_fetch and web_search to retrieve arbitrary URL content specified in reference files, representing low risk from fetched web pages.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents a multi-chain wallet development kit (WDK) with direct transfer, transaction, staking, lending, and bridge operations (such as sendTransaction, transfer, swidge, swap, bridge, supply, borrow, etc.). These qualify as direct financial operations. The access controls described are agent-enforced instructions/warnings rather than independent execution-layer authentication or authorization checks. Therefore, it is a direct operation without established qualifying independent control, making it high severity.