api-contracts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill clearly ingests public third‑party content (e.g., the /api/video/jobs/from-zillow endpoint that scrapes Zillow, the worker RAG endpoints like /api/rag/ingest and /api/rag/search, and /api/knowledge/index which accepts a URL) so untrusted web content is fetched and used to drive job creation/searching and indexing, meaning such content can materially influence agent behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly documents payment-related endpoints and PayPal integration: POST /api/checkout (Universal PayPal checkout), POST /api/video/subscribe (PayPal checkout for video plan), POST /api/webhooks/paypal (PayPal signature verification/payment event handler), and admin route POST /api/admin/products/create (Create PayPal product). It also lists other payment/checkout endpoints (e.g., /api/custom-solutions/checkout). These are specific payment gateway integrations and handlers (i.e., explicit financial execution functionality), not generic API or browser automation. Therefore it grants direct financial execution capability.