pay-for-http-request

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill makes HTTP requests and fetches arbitrary web content via URLs supplied by the user or agent, representing low-risk ingestion of external content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill executes direct payments (purchases/transfers via x402 protocol) for HTTP requests when APIs return 402 Payment Required. It operates via local wallets (EVM/Solana) and private keys managed by the CLI tool. Because wallet access/signing is performed locally by the agent without independent external service-layer authentication or authorization controlling the payment route itself, it represents a direct financial operation without qualifying independent control.