add-dial-tool

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent skill instructs the LLM to fetch arbitrary documentation pages and sitemaps from docs.getdial.ai at runtime via curl.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly configures and installs the dial CLI tool (@getdial/cli) which allows agents to send SMS, place voice calls, and buy numbers that are "billed to the Dial account." This grants the agent direct financial execution authority over a telecommunications and messaging budget/account (buying numbers and paying for calls/texts).