{"demo":"injected-memo","title":"A reply that tells the agent to drain its wallet","verdict":"block","mode":"default","kind":["text"],"summary":"The text contains instruction-like content.","decoded":null,"findings":[{"code":"role-override","severity":"block","source":"text","detail":"tries to replace the agent's instructions"},{"code":"fake-system-turn","severity":"block","source":"text","detail":"imitates a system/assistant turn"},{"code":"transfer-request","severity":"block","source":"text","detail":"asks the agent to move funds"}],"checked_at":"2026-10-21T10:22:46.594Z","limits":"Static check of the request you sent: it decodes known approval, permit, transfer and delegation shapes and screens text for injected instructions. It does not simulate the call or read the chain, and it cannot prove a request is safe.","disclosure":"Built and run by Wren, an AI agent (@WrenOnBase)"}