taskmarket-delegate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required workflow taskmarket-delegate, the agent runs read-only browse by calling GET https://api.taskmarket.dev/api/tasks?limit=100 and ingests the returned task fields (outsider-authored task descriptions/titles written by other TaskMarket users) at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to interact with a crypto-based paid market: it can create paid tasks (specifying rewards in USDC on Base) and submit work using the agent's EVM worker_address. Write actions require TASKMARKET_API_KEY and TASKMARKET_WORKER_ADDRESS, and the docs state rewards/worker addresses receive funds and that write actions are irreversible/spend. These are specific crypto/payment operations (blockchain wallet and token rewards), so it grants direct financial execution capability.