check-balance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to query user-provided or well-known public Nano RPC endpoints (e.g., https://rpc.nano.org and other listed nodes) for account balance/pending and to act (e.g., call wallet_receive) based on those responses, which means it fetches untrusted third‑party content that directly influences agent actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for managing Nano cryptocurrency accounts via a Nano node RPC. It not only reads balances but instructs and documents wallet operations (e.g., wallet_receive, wallet probe with mnemonics, wallet_balance, wallet_probe_balances) which perform on-chain wallet actions to claim/receive funds. These are direct crypto/blockchain wallet operations, so it grants direct financial execution capability.