token-approval-checker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads on-chain ERC20 Approval logs and token transfer-history responses from Etherscan-style APIs based on the user-supplied address/chain input, so outsider-controlled content (from those public data sources) is ingested as free-form JSON fields at fetch/parse time.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is specifically focused on ERC20 token approval management and explicitly recommends transaction-level revocation actions: it mentions using Revoke.cash (a specific service that performs revocation transactions) and calling approve(spender, 0) on the token contract to revoke allowances. Those are concrete crypto/blockchain execution operations (signing/sending transactions), so this skill contains direct financial execution capability.