x402

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The x402 skill allows querying and executing arbitrary external API endpoints (such as x402.biwas.xyz, stx402.com, and x402.aibtc.com) via execute-endpoint and probe-endpoint, which ingest untrusted outsider-authored HTTP response bodies and data.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly features capabilities for executing paid API endpoints, sending transactions involving sBTC and STX tokens, and utilizing a configured wallet to handle payment flows automatically (including payment amounts and sponsored transactions for messaging).