accept-agent-payments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to inspect, query, and consume responses from external services and marketplace listings (e.g., via circle services inspect, HTTP requests to seller endpoints, and fetching https://agents.circle.com/services), allowing third-party services to supply untrusted free text into the agent's workflow.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill's primary purpose is setting up seller-side monetization for HTTP endpoints using Circle USDC pay-per-call payments and x402/Gateway nanopayments. This involves creating billable usage and configuring payment gates (indirect financial operations). Although test commands (circle services pay) are discussed for verification, they operate as examples within a seller-side development guide rather than delegated direct payment routing executed by the skill itself.