use-api-gateway

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow consumes data from social feeds, browser sessions, and external API gateways (https://gateway.usebuy.ai), where outsider-authored content (such as social posts or web page text) is ingested into the agent.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates a direct payment workflow through an API gateway settling stablecoin payments on the Celo mainnet, purchasing browser sessions, GPU leases, and partner paywalls. Control instructions rely on agent-followed warnings and user approval steps rather than independent service-layer or execution-layer access controls enforced on the payment route.