breeze-x402-payment-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly instructs the agent to call public Breeze x402 endpoints (e.g., https://x402.breeze.baby and https://api.mainnet-beta.solana.com), parse returned JSON/transaction strings, and sign/send transactions—i.e., it ingests untrusted third‑party API responses that directly drive actions—so external content can materially influence behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill is explicitly built to perform on-chain financial actions on Solana: it constructs deposit and withdraw transactions, requires a WALLET_PRIVATE_KEY, signs transactions with that key, sends them to the Solana RPC, and handles x402 USDC micropayments. It exposes dedicated endpoints (/deposit, /withdraw, /balance) and code to sign and broadcast transactions — i.e., it is specifically designed to move funds and manage crypto balances rather than being a generic tool. Therefore it grants direct financial execution authority.