straitsx

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow involves implementing webhook and Remote Host Authorization (RHA) endpoints where StraitsX calls the agent's server with transaction data and merchant metadata (such as merchant name, location, and references).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references an external npm package installation command (npx api install "@straitsx/v1-CARDS#..."), which represents an unverifiable third-party registry dependency at runtime/setup.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill integrates with the StraitsX Card Issuing API, which includes payment card management, remote host transaction authorization (RHA), and card transaction processing. This falls under direct financial execution capabilities (Payment Gateways/Card Issuing/Transaction Authorization APIs).