cex-dex-arbitrage
Warn
Audited by Snyk on Mar 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill explicitly fetches and processes public third‑party data at runtime—e.g., onchainos dex-token search/price, onchainos dex-swap quote, price-feed-aggregator.snapshot, and GoPlus check_token_security are required calls in the Pre-flight and Step 3 workflows—so untrusted on‑chain/web data is read and used to make gating, ranking, and action decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata