monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow monitors Exa and Firecrawl recurring search and page-change check monitors, which fetch and judge external web pages and content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill manages recurring Exa searches and Firecrawl site monitors through the arks CLI and ArkSpace MCP tools. It mentions continuing charges and billing for underlying work, but managing recurring automated web-scraping or search monitors and presenting estimated costs does not constitute executing a direct financial transfer, charge, or payment instruction. The financial exposure is indirect billing/usage estimation, which falls under indirect operations.