cex-dex-arbitrage

Warn

Audited by Snyk on Mar 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). This skill explicitly fetches and processes public third‑party data at runtime—e.g., onchainos dex-token search/price, onchainos dex-swap quote, price-feed-aggregator.snapshot, and GoPlus check_token_security are required calls in the Pre-flight and Step 3 workflows—so untrusted on‑chain/web data is read and used to make gating, ranking, and action decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 11, 2026, 04:02 PM
Issues
1