bodega-markets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflows and scripts (e.g., scripts/list-markets.js calling getMarkets/getTopVolumes/getRecentActivity from scripts/bodega-client.js, and positions.js) clearly fetch and display public prediction market data (user-generated market titles/questions) which the agent reads and can use to decide buys/sells, so untrusted third-party content can materially influence actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to trade prediction markets on Cardano and includes concrete transaction capabilities: scripts and commands to buy and sell Yes/No shares, cancel orders, and claim rewards, plus use of a market-operator to execute transactions and bech32 addresses. These are direct crypto/blockchain financial operations (placing orders, sending transactions, redeeming funds), so it grants direct financial execution authority.