agentic-payments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow involves paying HTTP 402-protected resources by inspecting and fetching URLs and receiving arbitrary seller response bodies or error messages, which constitutes consuming outsider-authored web content at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The SKILL.md documentation details the agentic-payments skill, which explicitly integrates with InFlow to perform HTTP 402-protected resource payments via MPP (Payment auth scheme) and x402 protocols. It includes specific tools, APIs, and commands for creating payment transactions, managing subscriptions, checking balances, executing charges, and handling financial approvals (inflow mpp pay, inflow x402 pay, inflow mpp subscribe, etc.), constituting Direct Financial Execution Authority.