civic-record

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow is a CLI wrapper (scripts/call.mjs) that only ingests user-supplied arguments/queries you provide at the command line and then fetches/calls first-party public federal sources selected via explicit service IDs, not a monitored feed/queue where outsiders can inject free text to be consumed without selecting an item.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly supports on-chain payments: it requires a wallet private key (FITTINGS_PRIVATE_KEY), specifies USDC on Base as the payment token, and describes an off-chain signature authorizing a USDC transfer with the facilitator submitting the transaction (covering gas). Those are specific crypto payment instructions (wallet private key use and token transfer), which constitute direct financial execution capability.