app-store

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime ingests outsider-authored Apple App Store review text via the /api/apps/{appId}/reviews and /api/bundles/{bundleId}/reviews endpoints on https://appstore.fetcher.sh, and the user can supply the term/identifiers that determine which reviews are fetched.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes payment mechanisms: a "topup" flow (POST /api/credits/topup, topup_credits) and an x402 pay-per-call flow that requires USDC on specific chains (Base, Polygon, Arbitrum, Monad, Solana). It also references an automated signing client (@x402/fetch signs and retries automatically). These are specific crypto payment/signing capabilities (moving value to pay for calls), not merely generic HTTP or browsing functionality, so the skill grants direct financial execution authority.