shopping

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The shopping workflow uses CLI search tools (meta-catalog-search, facebook-cli) and browser search tasks that ingest external web search results, product listings, and marketplace items authored by outsiders.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents a shopping assistant supporting product search, comparison, and purchase flows (SKILL.md:3, SKILL.md:99-108). The purchase workflow references downstream checkout execution via Shopify UCP or browser checkout references (SKILL.md:104, SKILL.md:107), but the skill itself functions as an indirect instruction guide and product discovery interface without performing direct financial transfers, charges, or settlement operations within its own documented operations.