tier-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s required runtime workflow (e.g., scripts/batch-evaluate.sh, scripts/check-github-dev.sh) fetches outsider-authored free text from GitHub API responses (search results, stargazers, and user profile JSON) based on user-supplied usernames/inputs, without requiring prior selection of a specific fixed item by the agent.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes explicit, specific commands and scripts to update a user's paid subscription ("Polar subscription") using an access token and a manage-polar API script (npx tsx scripts/manage-polar.ts user update-tier). This is a concrete billing/subscription modification capability (i.e., changing paid subscription state) rather than a generic tool, so it constitutes direct financial execution authority.