add-dial-tool

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent skill configuration file includes instructions for the LLM/agent to fetch documentation via cURL from docs.getdial.ai, which represents low-risk ingestion of external web content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill configures and installs the dial CLI and OneCLI credential injection, giving NanoClaw agents the ability to buy numbers, send SMS, and make phone calls billed to a Dial account (direct financial operation: purchases/charges). Access control is enforced independently by OneCLI gateway rules and credential scoping per agent group (onecli rules create and onecli secrets set-secrets).