pay-with-app

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow handles HTTP 402 payment challenges and their JSON response bodies issued by arbitrary online merchants/payee servers.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements a direct financial operation by handling HTTP 402 payment challenges through EIP-3009 TransferWithAuthorization signing, token swaps, and request retries. However, it relies entirely on user-prompted confirmation gates (AskUserQuestion) rather than an independent service- or execution-layer access control enforced by the platform to authorize or prevent payments. Therefore, qualifying independent access control is absent for this direct operation, resulting in high financial-security exposure.