onair-shoutout

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-authored free text at submit time via the user-provided --read argument and includes it in the POST body (read_text) to the On-Air Shoutout API, i.e., the API call is directly driven by free text without selecting a specific pre-existing item first.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly performs on-chain payments: it signs x402 payments in USDC on Base, requires a private key (env/file), enforces a confirm flag to execute a $5 payment, and can redirect/refund payments. This is direct crypto financial execution (wallet signing/spending), so it grants Direct Financial Execution Authority.