cournot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent skill queries Cournot probabilities via an API where user-provided event messages are sent to an external service and retrieved data/basis contains external web search results and summaries.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation and configuration explicitly reference wallet commands, payment networks, crypto/blockchain payment handling, and payment execution (topup, prepaid calls, wallet signatures, payment intents, and $0.01 per-call payments using compatible wallet commands such as baw). These are specific mechanisms for financial execution and crypto-based payments rather than generic browser or terminal actions.