vobiz-api

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the agent at runtime to fetch current endpoint details from https://docs.vobiz.ai and https://docs.vobiz.ai/mcp, which would directly influence request construction and thus can control agent behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly supports purchase and balance-transfer operations and instructs the agent to show the target account, resource, and "financial effect" and to require explicit confirmation before "purchases" and "balance transfers". It maps tasks to specialized skills such as purchasing/assigning/releasing phone numbers and managing reseller/sub-account functions — capabilities that directly move or affect money within the platform.