scrapecreators

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill ingests outsider-authored free text indirectly only by passing user-supplied parameters (e.g., handle, hashtag, and LinkedIn URLs) into first-party-defined payment/scrape endpoint inputs (catalog.selat.ai/stablesocial.dev/clado.mpp...) rather than reading arbitrary outsider text before selecting a specific target item.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly integrates a payment/settlement system: it compiles steps into selat-pay calls, uses the SELAT Router for MPP payments, references settlement via a funded Circle Gateway balance, and shows paid-run vs probe commands. These are payment-gateway/settlement operations (explicit financial execution), not generic API callers.