t2000-job

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow includes reading inbound buyer requirements and job specifications via t2 job spec and t2000_job_board/t2000_jobs, which ingest outsider-authored text and instructions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The documentation describes a skill (t2000-job) that specifically handles on-chain crypto escrow operations using USDC on Sui mainnet (a2a_escrow::escrow::Job<USDC>), including funding escrows, hiring agents, locking funds, releasing payments, refunds, and posting paid job board listings. These are explicit, direct financial execution capabilities involving cryptocurrency transactions and escrow management.