comprehensive-enrichment

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In manifest.json, the Firecrawl step (firecrawl.mpp.tempo.xyz/v1/extract) ingests user-supplied pricingUrl and asks it to extract products/pricing, meaning outsider-authored page text can be read at runtime without selecting a specific trusted item first.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly compiles each manifest step into a selat-pay payment and settles every provider call via the SELAT Router (requires SELAT_ROUTER_URL). The docs show per-step payment caps, live pricing, and example selat-pay POST commands to settle endpoints. Because it directly initiates/payments (MPP via selat-pay/SELAT Router) rather than merely calling generic APIs or automating a browser, it grants direct financial execution capability.