okx-agent-payments-protocol

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow consumes outsider-authored free text via HTTP 402 error responses and payment challenges returned by monitored endpoints.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill manages agent payments, paid endpoints, subscriptions, billing channels, and payment links via x402, MPP, a2a-pay, and HTTP-payment protocols. It executes direct financial operations including quoting, charging, and paying via commands such as onchainos payment pay and onchainos payment pay-local. Access control relies on session checks (onchainos wallet status) and user confirmation steps, but lacks independent service-layer or execution-layer authorization checks enforced independently of the agent.