pay-via-agent-wallet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow consumes outsider-authored free text from paid API endpoints and marketplace search results returned by external service providers.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates a direct payment workflow through CLI commands (circle services pay) to settle stablecoin (USDC) payments for paid APIs (x402 protocol micropayments). Regarding access control, the command execution relies on the local Circle CLI and the agent wallet's local session/signing state without an independent service-layer or execution-layer authentication check enforced on the payment route by the execution environment itself.