census-geography-bundle

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow in call.mjs only ingests outsider-provided free text when the user explicitly supplies it via --search/--describe into /catalog/search?q=... or /catalog/<id> calls, and it does not automatically read arbitrary third-party text streams (e.g., email/chat/inbox/issues) without selecting a specific item.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes a crypto payment flow: the endpoint can return a 402 quote that the client must sign, it shows an example setting FITTINGS_PRIVATE_KEY=0x... and running node call.mjs to pay with a wallet holding USDC on Base, and references EVM-related packages (@x402/evm). Those are specific mechanisms to authorize and execute crypto payments (signing with a private key), which constitutes direct financial execution capability.