taskmarket

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The daemon and email subsystems read inbound messages and email bodies via taskmarket daemon and taskmarket email inbox, which can ingest outsider-submitted free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes tools and workflows for interacting with an onchain task marketplace ("Taskmarket") on Base, which explicitly involves requester wallets escrowing funds, worker wallets earning payouts, handling X402 payment flows, managing deposits, and executing paid transactions via a first-party CLI and raw REST API. Because it contains specific tools/APIs for crypto transactions, blockchain wallet operations, and financial settlement, it grants Direct Financial Execution Authority.