wallet-compliance-scanner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The scanner's runtime code calls the public CoinGecko API (https://api.coingecko.com/api/v3/search?query=...) to fetch token metadata and then directly reads/interprets that untrusted third-party data in heuristic_screen to classify tokens and drive recommendations, so external content can materially influence decisions.