use-vault-and-capital

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent connects to an external MCP server to search and retrieve guide content at runtime via search_guides and get_guide.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents direct financial operations including sending bank transfers (SKILL.md:459), executing payment batches (SKILL.md:485), and managing recurring payments (SKILL.md:509) via the assistant Fai or CLI/MCP. These direct payment operations rely solely on conversational prompts, user confirmation steps, and optional dashboard checks without independent system-enforced authentication or transaction-level authorization checks at execution time. Therefore, it is a direct operation without qualifying independent control.