pay-with-any-token

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow instructs the agent to parse HTTP 402 challenge response bodies received from third-party APIs and extract payment instructions (amounts, tokens, recipients, and resources) without prior selection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to download and execute an installation script from https://tempo.xyz/install via curl and bash, representing an unverifiable runtime external dependency with weak/unknown publisher provenance.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation and guidelines explicitly describe handling HTTP 402 payment challenges via crypto tokens using the Tempo CLI, Uniswap Trading API, and direct blockchain operations (such as ERC-20 swaps, cross-chain bridging, EIP-3009 off-chain signing, and direct smart contract interactions via cast send). These are specific financial execution capabilities (Crypto/Blockchain wallets, swaps, transactions, and payments).