api-gateway

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly documents proxying web-search and scraping services (e.g., "brave-search" -> api.search.brave.com, "firecrawl" -> api.firecrawl.dev, "exa" -> api.exa.ai, "tavily" -> api.tavily.com) and shows examples of calling arbitrary third‑party API endpoints whose responses are passed through to the agent, so the agent will ingest untrusted/public user-generated web content that can materially influence subsequent actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is an API gateway that explicitly lists and proxies financial/payment services (notably Stripe and Square) and other finance-related APIs (QuickBooks, Xero, Google Ads, WooCommerce, Chargebee, etc.). It provides native endpoint access via managed OAuth and includes examples for Stripe and endpoints for services that support payments, invoices, subscriptions, and ad account management. Because it explicitly exposes payment/banking/ads APIs (i.e., tools whose primary/explicit purpose can move or manage money), it grants direct financial execution capability.