pay-with-any-token

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill parses external 402 payment challenge responses and API payloads containing free text from paid endpoints and APIs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to download and execute an installation script from https://tempo.xyz/install at runtime via bash, representing an external operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents direct financial operations including executing token swaps, cross-chain bridging, and paying API challenges via the Tempo CLI and Uniswap Trading API, backed by cryptographic private keys (cast keystores or PRIVATE_KEY). Access control relies on local CLI login and key presence rather than an independent execution-layer validation check.