trading-system

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill imports and starts public market feeds and integrates with external platforms (e.g., createCryptoFeed()/feed.start() in index.ts and explicit references to Polymarket/Kalshi and POLYMARKET_API_KEY/KALSHI_API_KEY), so bots ingest and act on untrusted public market/user-generated content as part of their workflow.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a trading execution system. It defines an executionService in createTradingSystem, bot APIs to register/start/stop bots, and strategy outputs that include concrete trade instructions (platform, marketId, action: 'buy', side, size). It also logs executed trades and provides P&L and portfolio state. These are direct market-order capabilities (placing buys/sells) rather than generic tooling, so it grants direct financial execution authority.