quotient-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow includes fetching discovery endpoints like /openapi.json, /api/public/pricing, and /llms.txt from the public Quotient base URL at runtime; those responses are outsider-authored free text/JSON that can be ingested into the agent’s LLM context (e.g., via “Treat OpenAPI as canonical route and invocation metadata” and “AI index: /llms.txt”).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly requires fetching discovery metadata at runtime—specifically https://q-api.quotient.social/openapi.json and https://q-api.quotient.social/api/public/pricing—which the skill treats as canonical invocation metadata that directly control how the agent executes requests.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes and requires payment execution functionality: it mandates handling "x402 payment flows", using Bankr wallet tooling, providing a Bankr API key with signing permissions (not read-only), and instructs the agent to sign payments and retry with a PAYMENT-SIGNATURE. These are specific payment/payment-signing operations (direct financial execution), not generic tooling.