geo-lookup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path scripts/call.mjs --search ingests outsider-authored free text from the --search query parameter and fetches /catalog/search?q=..., which can be posted with poison text into whatever feed the catalog search endpoint reads.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes an on-chain payment mechanism: it requires "USDC on Base" and instructs setting a spending wallet private key via an environment variable (export FITTINGS_PRIVATE_KEY=0x...). It states payments are performed by an off-chain signature authorizing a USDC transfer and that the facilitator submits the transaction (covering gas). These details show the skill is specifically designed to move money (sign and submit crypto payments), so it grants direct financial execution capability.