website-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow requires fetching an arbitrary URL provided by the user during discovery using WebFetch to extract brand elements and aesthetic cues.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill provides instructions for designing and building multi-page websites, with an optional authentication scaffold (BetterAuth) that includes a polar plugin reference. It does not perform or instruct direct financial operations such as transfers, charges, or trades. Therefore, it falls under the indirect financial operations scope (specifically related to optional integration setups), which evaluates to medium severity.