b2c-app-strategist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's required workflow (the "4-Step Validation" and "Analyze [existing app]" steps) explicitly instructs fetching and analyzing open/public third-party content — e.g., App Store/Sensor Tower charts, "download top 3" competitor apps, and TikTok/Instagram UGC/ads — so untrusted, user-generated content is ingested and can influence decisions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes payment-specific tools and subscription/paywall platforms (Superwall / RevenueCat) as part of its core tool stack and prescribes subscription pricing and paywall behavior. Those are purpose-built payment/subscription management services (i.e., specific financial-execution tooling) rather than generic browser or API callers, and enable creating and managing transactions/subscriptions. Therefore it meets the "Direct Financial Execution" criterion.