ton-xstocks

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The content describes instructions for interacting with tokenized equities on the TON blockchain using specific APIs and MCP swap tools, which is part of financial transaction facilitation.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill fetches public asset data from the xStocks API via curl, which is a public API search/fetch of third-party token metadata.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly contains instructions and tools for executing cryptocurrency and tokenized asset swaps on the TON blockchain using specific tools like send_raw_transaction and get_swap_quote. This falls under crypto/blockchain transaction signing and market order execution capabilities.