opensea

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent skill queries and interacts with the OpenSea API and marketplace, which returns NFT metadata, collection descriptions, and user-generated content from external actors without forcing prior selection, posing an indirect prompt injection risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes tools and sub-skills for crypto and blockchain financial execution, such as trading NFTs on Seaport, swapping ERC20 tokens via DEX aggregator, and configuring wallet signing providers, which directly fall under crypto/blockchain wallets, swaps, and market orders.