domain

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to fetch external domain liveness probe web pages and check external web pages during domain and social handle searches, exposing the agent to outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains specific instructions and commands for purchasing domain names using the Vercel CLI (vercel domains buy) and Namecheap API (namecheap.domains.create), which explicitly execute financial transactions (spending money to buy domains). It also instructs the user "Confirm with the user before running — this charges real money." This directly fits the criteria for Direct Financial Execution Authority (Risk: 1).