Bankr Agent - Transfers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly resolves social handles (Twitter/X, Farcaster, Telegram) and uses recipient activity to choose chains, which requires fetching and interpreting public, user-generated data from social networks and public blockchain sources (untrusted third-party content) before executing transfers.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform asset transfers: it names supported chains (EVM chains, Solana), token types (ETH, ERC20, SOL, SPL), and recipient formats (addresses, ENS, social handles) and gives direct examples/commands like "Send 0.5 ETH", "Transfer 100 USDC", and "Social handles are resolved to linked wallet addresses before sending." Its primary and explicit purpose is to move crypto assets (sign/send transfers), not a generic tool, so it meets the definition of Direct Financial Execution.