trust-wallet-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow monitors x402 payment HTTP endpoints via twak x402 request and twak x402 quote, which ingest and process untrusted server-authored responses and error bodies.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly defines tools and capabilities for direct crypto financial execution, including sending tokens, swapping tokens, cross-chain swaps, buying/selling crypto with fiat (on/offramp), limit orders, DCA automations, and agent payment escrows.