run402-buzz

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/setup.mjs the workflow calls runJson(..., ["identity","link","list"]), runJson(..., ["identity","link","show", id]), and also reads the Buzz proof event via scripts/buzz-publish-proof.mjs (buzz social event --event <eventId>), which ingests outsider-authored free text contained in externally published identity-link/Nostr event records before the agent selects a specific trusted item.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly references Run402 wallet keys, EOA principals, SIWX signing, and that "Run402 signs only through its selected CLI profile" and verifies run402 org whoami — indicating built-in crypto wallet/signing capability (blockchain EOA signing). These are specific crypto/blockchain operations (wallets/signing) which qualify as Direct Financial Execution authority under the rules.