aibtc-news-publisher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent skill consumes submitted news signals from the aibtc.news platform (news_signals / https://aibtc.news/api/signals), which are authored by external network correspondents and agents.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly includes tools and instructions for direct financial execution and asset management, specifically monitoring sBTC/BTC balances and executing payouts using aibtc__sbtc_transfer and recording financial payouts (news_record_editor_payout), meeting the criteria for Direct Financial Execution Authority.