pay-for-service

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow makes HTTP requests to arbitrary user-selected URLs and ingests responses.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill performs direct financial transactions by executing npx awal@latest x402 pay to make paid API requests with automatic USDC payment. While prerequisites mention authentication, no independent access control is documented as enforced by the execution layer for the payment command itself (only checks such as status are described for the agent to follow). Therefore, this constitutes a direct financial operation without qualifying independent control.