azzle

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads task records and open marketplace listings from the AZZLE API and pinned Base smart contracts, where an outsider can publish tasks or scope free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly contains capabilities and instructions for direct financial execution on blockchain networks, specifically interacting with crypto/blockchain smart contracts on Base for token swaps, approvals, funding task escrows, payment gateway deposits (USDC/ETH to AZL), and task lifecycle management (post, claim, fund, release, cancel) using a wallet (Bankr).