iblai-vibe-monetization-analytics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow for /iblai-vibe-monetization-analytics fetches Platform-admin JSON lists for paywalls, subscribers (including search), and revenue directly from the ibl.ai DM billing analytics endpoints based on user-provided filters and identifiers, so outsider-authored free text (e.g., search terms or status/item_type strings) can be ingested as request parameters into the monitored data-fetch path.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly runs a runtime fetch to validate the live OpenAPI schema (curl -sS https://api.iblai.app/dm/api/docs/schema/ -o /tmp/iblai_schema.yaml) so the remotely-fetched schema will directly influence the agent's subsequent API-calling behaviour, therefore it's flagged.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about monetization and integrates with Stripe: it documents platform revenue endpoints, Stripe Connect status, Stripe webhook handlers that record payments, and a subscription-cancel endpoint used via useCancelSubscriptionMutation / CancelSubscription. The cancel mutation and the Stripe portal branch perform an action against payment/subscription state (cancelling subscriptions) and the docs reference Stripe Connect and webhook handlers — this is a purpose-built financial/payments integration (Stripe). Therefore it provides specific payment-gateway-related execution capability.