data-acquisition-specialist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). [Exclusion] Skill ini terutama mengekstrak data dari URL yang ditentukan pengguna melalui mekanisme scraping (requests/BeautifulSoup, atau chrome-devtools via fallback), tetapi tidak ada sumber runtime yang jelas dan tetap yang “monitor/consumes” teks outsider tanpa terlebih dulu memilih URL/konten tertentu; skema ini lebih mengandalkan pencarian/penentuan target perintah pengguna.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). Although this skill is framed as a data-acquisition/scraping tool, it explicitly lists the ccxt library ("Crypto Exchange API") which is a specific crypto exchange API capable of placing orders and managing crypto trading. The inclusion of ccxt constitutes a direct financial execution capability (crypto/market order functionality), so it should be flagged.