usage-based-billing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a billing/instrumentation workflow where events are ingested via client.usageEvents.ingest from application-supplied usage records (e.g., metadata containing endpoint/tokens), so outsider-authored free text can be submitted into the runtime payload without the agent selecting a specific item.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documents a concrete payments/billing API (Dodo Payments) and includes explicit SDK calls to create meters, attach pricing, ingest usage events, and consume credits (e.g., client.meters.create, client.usageEvents.ingest, price_per_unit, credit_entitlement_id). These are specific financial-operation APIs intended to produce charges or deduct customer credit balance — i.e., direct financial execution.