skill-14-social-reputation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). Outsider free text can enter the LLM context via runtime ingestion of Lens/Farcaster content (e.g., GraphQL feed results for profiles/publications and Hub API/Frame callback text from other users’ casts/comments), which the workflow then uses for reputation/scoring and filtering.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes blockchain financial operations: prerequisites list a blockchain-rpc-server (enables on-chain transactions), it references "Signer management" (signing transactions on users' behalf), Polymarket with USDC collateral (interaction with a prediction market using stablecoin), Lens "collect" modules and revenue split (monetary flows), and token rewards for DePIN. These are specific crypto/financial APIs/functions (wallets/signing, on-chain collateral, revenue transfers) that can be used to move value — therefore it grants Direct Financial Execution authority.