x402

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill searches and browses an external service directory (bazaar) and interacts with arbitrary third-party API endpoints, which can return outsider-authored content upon being searched or fetched.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements direct payment operations via the x402 protocol, executing paid API requests with automatic USDC transfers (awal x402 pay). Although prerequisites mention authentication (awal auth login) and balance checks, there is no documented independent access control or execution-layer validation enforced by the service/execution layer for the payment transaction itself—only agent commands and client-side balance/auth states. Therefore, it constitutes a direct financial operation without qualifying independent access control.