squarespace-expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's developer reference (references/developer.md) explicitly instructs agents to fetch any Squarespace page's public JSON by appending "?format=json" to page URLs, which allows ingesting untrusted, user-generated site content that could influence integration or template decisions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly exposes Squarespace Commerce API capabilities: it mentions programmatic management of products, orders, inventory, and importantly "transactions" and "payments" (commerce endpoints, API keys/OAuth). Those are specific financial/commerce APIs capable of processing orders/payments and managing transactions, so this is direct financial execution authority.