zerion-vaultsfyi-deposit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill directly ingests data from the public vaults.fyi MCP (https://mcp.vaults.fyi/mcp) — e.g., vaults_search, vault_details, vault_apy_history, transaction_context, build_vault_tx — and explicitly uses that untrusted third-party data to drive due-diligence, safety gates, and transaction-building decisions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform crypto asset operations and to execute DeFi deposits. It enumerates specific crypto/blockchain commands and APIs (Zerion CLI commands: zerion swap, zerion bridge, zerion portfolio/positions; vaults.fyi MCP endpoints: transaction_context, build_vault_tx, submit_tx_hash, get_transaction_status) and describes building deposit transactions and performing swaps/bridges to acquire deposit assets. These are specific crypto/blockchain financial execution capabilities (swaps, bridging, building/submitting transactions, deposit flows), not generic tooling. Although it says "Do not sign or broadcast" in one step, the skill's primary and explicit purpose is to move crypto funds into vaults and to construct/submit transaction hashes, so it meets the Direct Financial Execution criteria.