xl1-scaffold

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The scaffold explicitly fetches package metadata from the public npm registry (see scripts/scaffold/registry.js which calls https://registry.npmjs.org/* and is invoked by scaffold-xl1-dapp.js's resolveVersionsForTemplate), so untrusted, user-published registry data is read at runtime and directly influences generated package.json, chosen pnpm version, and subsequent install/build steps.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly scaffolds blockchain dApps and backends that perform chain interactions and transaction signing. It references wallet wiring, deriving signers from a seed phrase in .env, running a Node verification script that exercises the happy path through GatewayBuilder.build(signer), and dependency on an XL1 SDK (@xyo-network/xl1-sdk). These are concrete crypto/wallet/signing capabilities (not generic browser automation or a generic HTTP caller), so the skill is specifically designed to create tooling that can sign and submit transactions.