sp3nd

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs an AI agent to purchase items from Amazon and eBay by interacting with the SP3ND API, which processes user-submitted product URLs and order details from untrusted online marketplaces.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to download and execute instructions/code from sp3nd.shop and interact with an external third-party payment and shopping service whose publisher provenance is weak and arbitrary.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes tools and execution flows for buying products on Amazon and eBay using USDC on the Solana blockchain. It explicitly provides code and instructions for constructing, signing, and broadcasting crypto transactions (transferring USDC via Solana wallets) and interacting with payment APIs, matching the criteria for Direct Financial Execution (Crypto/Blockchain wallets, swaps, signing).