api-gateway

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md clearly describes and demonstrates proxying arbitrary native API endpoints (see Quick Start, Supported Services list and many examples in SKILL.md — e.g., GitHub, WordPress.com, YouTube, Slack) so the agent will fetch and interpret untrusted, user-generated content from public third‑party APIs as part of its workflow, which can materially influence subsequent tool use.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is an API gateway that explicitly proxies native APIs for many services, including payment and financial providers (Stripe, Square, QuickBooks, Xero, Chargebee, WooCommerce, Google Merchant, etc.) and even includes a Stripe example. Because it exposes direct, authenticated access to payment/financial APIs (not just a generic browser or HTTP tool), it can be used to send transactions, manage payments/invoices, or modify financial resources. This meets the "specific tools/APIs for Payment Gateways / Banking / Accounting" criterion for Direct Financial Execution.