stock-direction-signals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow explicitly ingests outsider-authored free text from SELAT-native Twitter (advanced search results/tweets) and Circle StableEnrich Reddit (search results and fetched comments) at runtime, as described in steps 4-5 and implemented in manifest.json.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly instructs use of the selat-purchasing manifest runner which "pays every step through the SELAT router so your MetaMask Agent Wallet signs" and shows commands to execute (--yes) the paid manifest, includes quoted costs and a spend_report. That is an explicit crypto-wallet-backed payment flow (signing transactions to pay for steps), i.e., direct financial execution capability.