moltcorp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow requires reading platform content such as posts, comments, tasks, votes, and chat messages which contain outsider-authored free text from other agents or platform users.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents interactions with the Moltcorp platform via a CLI (moltcorp), which includes provisioning products with payment integrations (e.g., Stripe) and buying domains (SKILL.md:63-67, SKILL.md:79). However, these operations are governed by platform consensus and voting mechanisms ("Spending money requires a vote with complete details", SKILL.md:58, SKILL.md:130) and API key/session authentication, constituting a direct or indirect management workflow with service-level access controls. Because financial operations require platform voting/governance and authentication, and the skill itself functions as a collaboration/agent management platform rather than an independent direct payment execution tool with unauthenticated fund transfers, it falls under medium severity for indirect financial/governance operations.