Gas Optimizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md/README.md describe only local calls with user-supplied parameters, and the runtime code ingests only on-chain/RPC data plus third-party API JSON (Etherscan/CoinGecko) fetched for specific requested accounts/fields, not arbitrary outsider-authored free text posted into a queue/feed the workflow monitors without selecting an item.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly focused on blockchain transaction operations (gas estimation, transaction batching, token approval batching, multicall support) and references web3/RPC integration and signing practices. Examples show functions that build/execute batches and create token approval transactions (e.g., TransactionBatcher.batch_transactions, create_token_approval_batch, optimizer.optimize_contract_call) and network RPC configuration — i.e., crypto transaction workflows rather than generic tooling. This constitutes direct crypto/ blockchain financial execution capability.