monero-wallet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow interacts with a local Monero wallet gateway and makes arbitrary HTTP requests that could return outsider-authored content (such as 402 challenge messages or protected resources).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill provides direct financial operations (transfers and payments) via a local gateway and python scripts (SKILL.md:61-65, SKILL.md:74-75). These direct payment routes are protected by documented independent authentication (an API key supplied via AGENT_API_KEY or X-API-KEY header validated by the gateway service) and spending limits enforced by the gateway layer (SKILL.md:29, SKILL.md:81, SKILL.md:158-159). Therefore, the security exposure is medium.