automated-trading-with-ichimoku

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly integrates and ingests external news and social sentiment (e.g., "Integrates news and social sentiment" and the call fetchExternalSignals(symbol) / analyzeExternalSentiment), meaning the agent would read and act on untrusted public/user-generated content from news and social media as part of its workflow.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed for automated crypto trading and contains direct financial execution capabilities. It shows concrete integration with a DEX SDK (Hyperliquid), including creating an account from a private key (privateKeyToAccount) and calling client.exchange.placeOrder with size, price, and order-type parameters. That code performs signed trading transactions (placing market/limit orders) rather than generic API calls or browser automation, so it grants direct ability to move funds/execute trades.