algorand-x402-python

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the server/middleware runtime path, outsider-authored request content (HTTP body/JSON and headers) is consumed by the x402 payment middleware (e.g., FastAPI’s PaymentMiddlewareASGI and the example /verify and /settle endpoints) when checking/processing payments and storing payment_payload/payment_requirements.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a payments SDK for Algorand. The documentation describes building HTTP-native payment applications, client/server middleware that "automatically handle 402 payments", registering signer implementations for Algorand schemes, and facilitator services that "verify and settle Algorand payments on-chain" (including /verify and /settle endpoints). These are specific crypto/blockchain payment and transaction-signing capabilities, i.e. direct financial execution.