pay-per-call-apis

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill prompt instructs the agent to ask the user to paste their API key and then pass it as a direct command-line argument to monid keys add -k <their-api-key>, which causes the secret to pass through the LLM context and command output.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow instructs the agent to discover, inspect, and run pay-per-call APIs via the Monid CLI, which fetches third-party scraped data and content where outsider-authored free text can be ingested.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to download and overwrite itself from an arbitrary third-party domain (https://monid.ai/SKILL.md) at runtime, constituting an unverifiable external runtime dependency with unknown provenance.