prava-shopping

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to receive token/cryptogram values from the checkout flow and embed them verbatim into CLI commands (e.g., --token/--cryptogram), which requires the LLM to handle and output sensitive secrets directly, creating a high exfiltration risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly performs payment operations: it mints card payment sessions (prava sessions create), polls for tokenized card credentials (prava sessions poll), and submits a checkout that charges payment (prava shop checkout with token/cryptogram and --yes). The flow is designed to complete purchases (result: "✓ Paid"), so this is direct financial execution authority.