find-engineering-firm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow searches and reads entries from the ServiceGraph API catalog, which can include user-supplied firm domains and search parameters.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill drives the ServiceGraph API to search and unlock firm records, debiting credits via POST /v1/datasets/pro_services/unlocks (10 credits/firm, with HTTP 402 returned on insufficient credits). This is a direct financial operation (charging/purchasing/settlement authorization of credits/data). Authentication uses Bearer tokens (Authorization: Bearer vk_...), but the access control is standard API key authentication rather than independent session-based or multi-factor service-layer user authorization for the payment action itself (the agent submits the stored API key via headers). Therefore, it falls under direct operations without independent qualifying access control.