utilia-pdf-to-markdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow explicitly accepts a user-provided public HTTPS URL to a PDF (“npx … pdf-to-markdown ”), and at runtime the tool must fetch and convert that PDF into extracted Markdown that is then returned/used in the agent’s LLM context, which is outsider-authored content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill uses the utilia-solana-agent client to sign on-chain payments: it explicitly signs an x402 payment locally, requires a Solana private key or keypair path, restricts payments to Solana mainnet USDC and a verified receiver, and reports the settlement transaction and per-call cost. These are explicit crypto wallet/transaction signing capabilities (direct financial execution).