endaoment

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow queries Endaoment API endpoints (https://api.endaoment.org) to search for charities by name or EIN and displays organization descriptions and details to the agent and user, which constitutes low-risk ingestion of third-party registry data.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains explicit instructions and scripts to execute cryptocurrency/blockchain transactions, specifically donating USDC to charities via smart contracts using Endaoment. This qualifies as Direct Financial Execution (Crypto/Blockchain Wallets/Swaps/Signing).