cartridge-paymaster

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill references community presets hosted on GitHub, but the agent only pulls configuration files or executes CLI commands without automatically monitoring outsider-authored feeds.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains specific commands to manage and update ad spend/transaction budgets (slot paymaster <name> create --budget <amount> and slot paymaster <name> budget increase/decrease), which falls under the category of managing budgets and financial execution/sponsorship of transaction fees.