zhongcao-note-copywriter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow allows reading public social-data (Xiaohongshu notes and comments via beatra.social.execute), which ingests outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill executes paid tool calls and renders paid content via the hosted Beatra service (consuming prepaid credits with wallet:spend scope), constituting a direct financial operation (purchases/charges). Access control is established via an OAuth device flow storing a bearer token in credentials.json.