filtmall-shopping

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 该 skill 的运行时会把用户自由文本直接作为搜索检索词输入 filtalgo-cli search "<完整用户需求>" --json，从而经 search→start_product_search/hydrate_products 读取并处理该文本（包含对接 list_supported_category_adapters、get_category_adapter_context 等）。

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes shopping checkout and payment commands (e.g., buy-now, checkout create/select-address, checkout prepare-payment) and references generation/handling of payment URLs and an internal payment handler (--handler wallet). Those are concrete payment-related APIs/tools (preparing payment entries and driving the platform checkout flow), which constitute direct financial execution capability for initiating payments or payment flows.