harness-capu

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow consumes inference completions, remote API responses/errors, model catalogs, and dashboard code via HTTP from the OpenCAP gateway, which are treated as untrusted data.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains specific smart contract interactions, token swapping, staking, and transaction execution capabilities on Base (blockchain/crypto wallets, staking, minting, swapping, unstaking, and burn operations) specifically designed for financial and token operations.