locus

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The Locus skill configures an MCP server with tools (execute, search_apis, etc.) that fetch arbitrary external API data and web research results at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes tools specifically designed to execute paid API calls and charge workspace credits (execute, estimate_cost, get_balance). It explicitly handles billing, spend limits, cost estimation, and idempotency keys for financial transactions against the Locus pay-per-use infrastructure.