saturnswap-market-swap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's workflow and scripts (SKILL.md and scripts/preview-swap.js) explicitly call getPool, getOrderBookAsks, and getOrderBookBids to fetch live pool and order-book data from external SaturnSwap APIs (public third-party market data) which the agent reads and uses to compute prices/decisions for swaps.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform market swaps on a cryptocurrency DEX (SaturnSwap). It defines flows and scripts to find pools, preview swaps, and to "build the transaction" by calling createMarketSwap / create-swap.js which returns a transactionId and hexTransaction. Although signing/submission is handed off to an operator skill, the skill's primary purpose is creating crypto swap transactions (market buy/sell), which is a direct financial execution capability in the crypto/blockchain category.