ecommerce-listing-image-set

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads third-party hosted version sources and remote MCP/API responses from Beatra, but does not monitor outsider-authored free text feeds without active selection.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents direct financial operations (purchasing/spending prepaid credits on the Beatra hosted service via tool calls, with tokens carrying wallet:spend scope). However, authentication is enforced independently by the Beatra service API and OAuth device flow authorization (authorize.py stores a bearer token in ~/.beatra/credentials.json), satisfying the requirement for qualifying independent access control on direct operations.