top-rank-tokens-sniper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill directly fetches public OKX/onchain data (e.g., scripts/ranking_sniper.py calls get_ranking which runs onchainos "token trending", and also calls get_advanced/get_holders) and risk_check.py queries public trades/security scans, and those untrusted, user-generated marketplace/trade data are parsed and used to drive buy/sell decisions, so third‑party content can materially influence the agent's actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a live cryptocurrency trading bot for Solana. It requires logging into an onchainos-managed wallet (TEE signing), exposes commands and functions to perform swaps and execute trades (e.g., onchainos swap swap --from ... --to ... --amount ... --wallet <addr> --slippage <pct>, onchainos wallet contract-call, onchainos wallet addresses, onchainos wallet balance, onchainos wallet order-status), and provides a live-mode flow that sets MODE="live", configures TOTAL_BUDGET and BUY_AMOUNT, unpauses trading, and starts the bot which automatically places buys/sells and manages exits. These are specific crypto-wallet, swap, signing and order-execution capabilities — i.e., direct financial execution.