evm-decimal-validation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). Yes — SKILL.md (Step 2 "Query On-Chain Values") and decimals-by-chain.md (the QueryDecimals() example) explicitly instruct the agent to read decimals from public ERC20 contracts on-chain, which are untrusted, third-party, user-deployed data that the agent must interpret and that directly affect conversion/configuration logic.