kaloclip

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The analysis create tool accepts an arbitrary external video URL from the user and fetches a shot-by-shot breakdown containing descriptions, voice-overs, and metadata from external web pages, introducing an indirect prompt injection risk via low-trust content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a direct financial/credit service ("Kaloclip membership", [credits] commands like clip script create, clip video create, and clip analysis create which consume platform credits that correspond to a paid billing balance). However, access control relies on standard API key authentication (secret-key header via KaloData config) validated by the service endpoint, satisfying the independent access control requirement for direct operations.