srezai-web

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent skill provides instructions and tools (such as web search, page reading, crawling, and research) to fetch arbitrary external web pages and content from the internet.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill provides web access tools (search, crawling, extraction) via an MCP server or REST API, which consume credits or require top-ups. However, it does not directly execute financial transfers, charges, purchases, or trades. Registration and credit top-up links are provided to the user for manual completion in a browser ("a page with the balance and a card/SBP top-up that needs no login and no password"). Therefore, this represents an indirect operational context or developer-guided setup rather than direct payment execution by the skill itself, placing it in the indirect financial scope.