higgsfield

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The installation scripts fetch the skill repository directly from https://github.com/Koushik890/higgsfield-api-skill.git, constituting an unofficial remote operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill integrates with the Higgsfield API (api.higgsfield.ai), which is a pay-as-you-go media generation service. It includes functions to price requests, estimate costs, and execute generation tasks that incur financial charges (e.g., hf.py estimate, hf.py run). This constitutes Direct Financial Execution Authority as it directly controls paid API transactions and budget limits for media generation.