frontpage-vote

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow can ingest outsider-authored free text from GET /api/proposals (e.g., each proposal’s title/body and suggesterName) and from GET /api/proposals/{id}/comments (each comment’s body), which are user-generated content by parties other than the operating user.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly requires and performs payments: every action ("vote", "submit", "comment") costs $0.01 paid "via the Machine Payments Protocol (MPP)". The docs show concrete payment integration and examples that execute payments (mppx CLI POST to /api/votes, TypeScript SDK using Mppx.create and tempo({ account: privateKeyToAccount('0x...') })). Responses include on-chain wallet addresses and amounts, and the system describes on-chain payouts to payer addresses. This is a specific payments API / crypto wallet signing flow (MPP/tempo/viem) intended to move funds, not a generic HTTP or browser tool.