nextapi

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md workflow explicitly requires reading the live OpenAPI at https://api.partners.nextpay.world/v2/openapi (step 5) and using that public third‑party JSON to determine exact request shapes and enums, which the agent will ingest and which can materially influence its actions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for integrating with NextPay Partners API v2, a payments platform. It names payment-specific endpoints and actions: "payment-intent" (one-time collections), "payout" and "payout requests" (to initiate disbursements and create payouts), "accounts" (balances, postings, account-to-account transfers), and "funding methods". It also documents using HTTP Basic Auth with client credentials to call the API and the API base URL, and refers to sandbox simulation of payment processing. These are specific financial execution capabilities (creating payments, disbursing funds, transfers), not generic tooling.