pay-via-agent-wallet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses circle services search and curl to query and fetch data from third-party APIs and marketplace services chosen by the user or agent, but does not monitor or consume an unprompted outsider submission feed (such as an inbox or issue tracker) without prior selection.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill executes direct stablecoin (USDC) payments for paid API calls via circle services pay. This is a direct financial operation (micropayments/purchases). The CLI executes the payment via agent wallet signing without independent access control enforced by the service layer (the wallet controls keys/authorization locally via the agent CLI).