glasser

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses Glasser to search, inspect, and execute third-party data provider APIs (such as web search or Reddit feeds) where outsider-authored content is fetched and processed at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents operational execution of paid API calls through a commercial broker ("Glasser"), where the glasser run command spends workspace balance and incurs direct financial charges per call. Although authentication requires credentials or a device flow, there is no independent server-enforced access control (such as payment authorization or independent validation gating the financial transaction itself) documented at checkout. Therefore, it constitutes a direct financial operation without qualifying independent control.