frontpage-buy-ad-dev

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform ad purchases on a blockchain testnet: it documents a full preview-and-buy flow, requires a testnet USDC top-up, instructs using an RPC URL and a dev wallet, and shows mppx commands to "settle" /api/buy which perform MPP payments. These are explicit crypto/blockchain payment operations (wallet/RPC/payment CLI), i.e., a tool whose primary purpose is to send transactions/move funds (even on testnet). Therefore it grants direct financial execution capability.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The prompt explicitly instructs the user/agent to add an /etc/hosts entry (a system-level file edit that requires elevated privileges and modifies machine network configuration), which is a state-changing operation that can affect the host.