search-for-service

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly instructs the agent to query the public x402 bazaar/CDP API (e.g., "npx awal... x402 bazaar search/list" and "details ") to fetch marketplace entries and endpoint schemas, meaning the agent will read untrusted public marketplace content and use it to choose and invoke services, which could embed instructions that affect subsequent actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires running the external CLI "npx awal@2.8.2" which fetches and executes remote npm package code at runtime (fetched from the npm registry, e.g. https://registry.npmjs.org/awal), so remote code is executed as a required dependency.