doc-url-metadata

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL doc.url-metadata takes a caller-supplied url, then the runtime performs a live fetch of that URL and returns parsed meta tag text (LLM-readable external page content) from outsider-provided input.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes a metered payment flow using crypto: it describes responding with a 402 signed quote, requires the client to sign an authorization with a private key (export FITTINGS_PRIVATE_KEY), references holding USDC on Base, and mentions @x402/evm libraries and off-chain signing/facilitator broadcasts. Those are concrete crypto payment/signing instructions (wallet/private-key usage) — i.e., direct financial execution capability to authorize spending.