swap-execute-fast

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill directly calls public KyberSwap endpoints (https://aggregator-api.kyberswap.com and https://token-api.kyberswap.com) from fast-swap.sh / execute-swap.sh (and documents these calls in SKILL.md) to resolve tokens, fetch routes, build transactions, and check honeypot/FOT status, and it parses and acts on those JSON responses to construct and broadcast real transactions—so untrusted or compromised API responses can materially change tool behavior and trigger unsafe actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's runtime scripts call external APIs (notably https://aggregator-api.kyberswap.com and https://token-api.kyberswap.com) via curl to fetch route/build JSON that is directly used to construct tx.data/to and then broadcast on-chain, so these URLs are required at runtime and directly control execution.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to build, sign, and broadcast blockchain swap transactions immediately. It calls a shell script that "builds the swap via fast-swap.sh then immediately broadcasts the transaction," requires wallet methods (keystore/env/ledger/trezor), accepts PRIVATE_KEY / keystore password envs, validates balances/gas, and returns txHash/explorerUrl on success. This is direct crypto/blockchain transaction execution (signing and broadcasting swaps) — not a generic tool. It therefore grants direct financial execution authority.