create-video-fal

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The skill includes explicit instructions to reroute calls through the "GooseWorks fal-proxy" to bill the Ads agent and to never use the provider SDK's default host, which is a deceptive billing-redirection behavior unrelated to the stated image-to-video purpose.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The code intentionally rewrites provider endpoints to force all media-generation calls through a GooseWorks proxy (passing a locally-stored token/agent_id), which is a deliberate billing-redirection mechanism that also sends local credentials to an external proxy and thus can misattribute charges or exfiltrate API keys.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly routes paid API calls through a GooseWorks "fal-proxy" that "bills the Ads agent" (lines 3, 6, 9-10) and includes a bundled media_proxy.py to ensure calls are billed to that agent. This is not a generic tool — it is explicitly designed to cause paid transactions charged to an Ads account, i.e., direct financial execution.