ton-xstocks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s runtime reads outsider-authored free text via the user-supplied xStock symbol and then fetches/uses corresponding JSON from https://api.xstocks.fi/api/v2/public/assets/{symbol}, but it does not ingest arbitrary user text beyond that selected identifier and the provider-returned asset/transaction fields.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform cryptocurrency trades on the TON network: it details resolving jetton masters, obtaining swap quotes, checking balances, emulating transactions, and calling send_raw_transaction + polling get_transaction_status to execute and confirm swaps (pre-fund USDT, buy, sell workflows). These are specific crypto transaction APIs/actions that move funds, not generic tooling.