ton-swap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md workflow requires calling get_known_jettons and get_swap_quote to resolve token data and retrieve a DEX quote (which returns transaction messages), and then uses those returned messages directly with send_raw_transaction—clearly ingesting external, public token/DEX data that can materially control actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform token swaps on the TON blockchain and to execute blockchain transactions. It includes specific, finance-focused tools and steps: getting swap quotes for token conversions (get_swap_quote), resolving token addresses (get_known_jettons), and—critically—calling send_raw_transaction to submit the transaction messages produced by the quote and then polling transaction status. This is a purpose-built capability to move crypto funds (buy/sell/swap tokens) and therefore constitutes direct financial execution authority.