fastaf-web-data

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches arbitrary public web pages, search engine results, and external product listings via user-specified URLs and queries.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents access to paid web data endpoints via an x402 pay-per-call mechanism where the agent signs payment headers (using an x402 v2 client) to authorize per-call charges ($0.003–$0.005 per request). This constitutes a direct financial operation (purchasing/paying for API calls) without an independent service-side authentication/authorization control on the x402 route, as authorization relies on client-generated signatures.