gov-federal-spending

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path reads outsider-authored free text via call.mjs POST/query inputs (e.g., recipient in the paid call body and --search query in /catalog/search?q=...), which are used to construct outbound requests and whose responses are fetched and printed.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly requires and describes signing payments with a crypto wallet to settle metered API calls. It documents a 402 "Payment Required" flow with a signed quote (SKILL.md:57-61), shows example usage that requires setting FITTINGS_PRIVATE_KEY and a wallet holding USDC on Base (SKILL.md:64-70, SKILL.md:76-79), and references EVM tooling (@x402/evm) for doing the signing (SKILL.md:81-83). This is a specific crypto payment integration that authorizes on-chain/off-chain settlement via a private key, which constitutes direct financial execution authority.