compute-resell

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads public market data and order books from the Surplus Intelligence API (https://api.surplusintelligence.ai/api/markets/...), which contains free text and pricing metadata authored by external market participants.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents programmatic buying, selling, and marketplace offer creation/management through APIs (POST /v1/seller/offers, DELETE /v1/seller/offers/{id}, and PATCH /v1/seller/offers/{id}) handling real USDC settlement on Base. This constitutes a direct financial operation (purchases/sales/settlement). However, access control for these direct operations is enforced independently by the external API service layer, which requires authenticated bearer tokens (SURPLUS_SELLER_KEY, SURPLUS_SELLER_AWS_KEY, SURPLUS_SELLER_VERTEX_KEY) minted via SIWE or stored as credentials, and validates authorization at the service layer for every request.