trustless-work-dev

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses Model Context Protocol (MCP) tools (mcp__trustless-work__searchDocumentation, mcp__trustless-work__getPage) to search and retrieve remote developer documentation from an external service, exposing the agent to documentation text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation integrates Trustless Work escrow contracts on the Stellar blockchain, providing specific tools, REST endpoints, and SDK instructions for handling milestone-based payments, releasing funds, funding escrows, resolving disputes, and executing blockchain transactions (mcp__trustlesswork, helper /helper/send-transaction, react hooks like useSendTransaction). This falls under cryptocurrency/blockchain wallets and direct payment/financial execution capabilities.