atxp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill workflow monitors incoming emails and SMS messages via commands like email read and phone read-sms, which ingest outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly features an agent wallet, funding capabilities via Stripe and USDC, and a specific command/tool (npx atxp@latest fund) to view payment links and deposit addresses to spend money or top up balances. Additionally, it references handling a funded wallet balance and paying for API tools, making it specifically designed for financial operations and wallet management.