shipp-sports-data

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent ingests real-time sports data and game events from Shipp API connections (api.shipp.ai), which represent third-party event feeds and unstructured game text that can be influenced by external actors.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly incorporates crypto wallet management, purchasing tokens with fiat, executing prediction market trades on platforms like Polymarket, and offramping funds to bank accounts using the MoonPay CLI (mp buy, mp prediction-market position buy, mp virtual-account offramp create). These represent direct financial execution capabilities involving blockchain transactions and market orders.