locus-agent-tools

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow involves checking a listing or notice against county records using tools like locus-listing-claim-check which ingest external outsider-authored text (such as listing or inspection text).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents direct financial operations in the form of paid x402 tool executions (such as purchasing property reports, solar screens, and briefs for various prices like $0.01 to $2.49) using EIP-3009 transfer authorizations and digital wallets (AgentCash). Independent access controls or user approval steps are described as instructions for the agent to follow ("Pay only on explicit authorization", "Ask before every payment"), but there is no independent service or execution-layer authentication mechanism enforcing payment validity independent of the agent's instructions.