pay-with-app

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow parses and consumes HTTP 402 challenge bodies and response fields from external payee servers via curl and network requests, which can contain outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill contains explicit instructions, functions, and workflows for executing blockchain transactions, specifically signing EIP-3009 authorizations, interacting with smart contracts via cast, swapping tokens via the Uniswap Trading API, and performing financial payments (handling HTTP 402 payment challenges via OKX's Agent Payments Protocol on X Layer).