find-event-tickets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads untrusted third-party event descriptions and ticket listings fetched from the Ticket Fairy API and external event pages during event search and offer review.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents direct checkout and purchase operations via ACP, UCP, and A2A (create_checkout, update_checkout, complete_checkout, payment handling via Stripe SPT and AP2 receipts). Independent access control is enforced at the service and execution layer via onboarded applications, signed requests, UCP platform-profile headers, UCP extension headers, UCP-Agent, Content-Digest, and HTTP Message Signatures over the request path and body.