gate-pay-x402

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to ingest external merchant discovery catalogs and tool responses (such as discoveryResource and x402_place_order/x402_request outputs), which can contain outsider-submitted free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly defines tools, APIs, and procedures for Direct Financial Execution. It documents specific payment and transaction-signing functions (such as x402_sign_payment, x402_create_signature, x402_submit_payment, x402_centralized_payment), wallet session authentication (x402_quick_wallet_auth, x402_gate_pay_auth), and order placement (x402_place_order) specifically designed for HTTP 402 payment requirements and cryptocurrency/gateway payment execution.