zerion-somnia-blockchain

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md "Somnia Agents" section explicitly describes Agents that "query the internet" (JSON API Request) and perform "LLM Parse Website" with validators executing off-chain LLMs and returning results to on-chain callbacks, meaning the skill's workflow expects consuming arbitrary public web content that can influence subsequent actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly documents blockchain transaction and wallet APIs: session accounts and the somnia_sendSessionTransaction RPC, createSessionClient/sendTransaction/writeContract helpers, and examples showing funding addresses and executing on-chain transactions. It also maps to trading actions (zerion swap/bridge) and payable Somnia Agents createRequest flows. These are specific crypto/blockchain primitives for moving value, not generic tooling, so it grants direct financial execution capability.