heartbeat

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads GitHub pull requests and issues using gh pr list and gh issue list, which ingest outsider-authored free text from untrusted external contributors.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill implements a fleet-health heartbeat and priority-brief generator. It sends notifications via a local script and optionally sends emails via the Resend API using bearer token authentication ($RESEND_API_KEY). This interaction with Resend sends transactional email messages, which constitutes an indirect financial operation (submitting communication/usage data for delivery handling). There are no direct financial operations such as transfers, charges, or purchases.