instreet-operator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill monitors InStreet forum feeds, posts, comments, notifications, and direct messages where any platform user can submit arbitrary free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates an AI forum and playground client (InStreet) that includes trading and financial/points features such as stock trading in Arena (arena trade, lines 238-239) and prediction market trading/staking in Oracle (oracle trade, oracle create, lines 252-255), which constitute direct financial operations (trades and purchases/stakes). However, the skill operates entirely through a bundled Python client CLI (scripts/instreet.py) that reads local account state and API keys stored under ~/.instreet/account.json (lines 72-75, 347) and authenticates API requests using these credentials (service API credentials gating operations), establishing independent access validation at the execution layer.