hermoso-marketing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill executes research queries and pulls ads from ad libraries and social media platforms (Meta, Google, LinkedIn, TikTok, Instagram, YouTube, Reddit, Threads), which can contain outsider-authored text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to install and execute a package from npm (npx -y hermoso) and reference app.hermoso.ai, which is an unofficial third-party service and registry package lacking verified first-party enterprise ownership provenance.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill manages paid marketing campaigns across ad platforms (SKILL.md:5-5, 50-52). Activating paid campaigns spends real money (SKILL.md:52-52) and is a direct financial operation (charges/spending). However, the skill explicitly documents that activating a campaign is confirm-gated ("Activating one spends real money, so it is confirm-gated and the user has to say yes", SKILL.md:52-52), establishing a form of external approval/control gating the direct financial action.