use-circle-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to search the x402 marketplace and inspect/pay for third-party services via the CLI, which can ingest outsider-authored free text from paid service responses and marketplace entries.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents direct financial operations including sending USDC (circle wallet transfer), bridging assets (circle bridge transfer), and executing paid API requests (circle services pay). These operations are performed via CLI commands without documented qualifying independent access controls enforced by the service/execution layer (authentication steps like login exist, but do not satisfy independent gating of transaction execution as required by the direct operation control test).