eliza-cloud-buy-domain

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's DNS/SSL reference (references/dns-and-ssl.md) explicitly instructs the agent to perform direct checks like curl -I "https://myapp.com/" and dig +short myapp.com", which fetch and interpret content from arbitrary public domains (user-controlled/untrusted third-party sources) and can affect verification and next-action decisions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly performs purchases: it exposes/uses a dedicated buy endpoint (postApiV1AppsByIdDomainsBuy / parent-agent "domains.buy") that atomically debits the org's cloud credit balance to register a domain via Cloudflare (with refund handling and 402 insufficient-credit status). This is a specific, purpose-built API to move funds/credits and complete a paid transaction — not a generic HTTP or browser action. Therefore it grants direct financial execution authority.