architecture

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required runtime workflow enriches first-party specs/design/components/<id>/design.json by deriving fields and (optionally) fetching an external dependency contract via tools like fetch_openapi_spec/web search, meaning outsider-authored free text is only ingested after the agent actively searches/fetches specific targets rather than passively consuming posted feeds.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The document includes an explicit example of a payment gateway dependency: a resolved external dependency named "stripe" with an npm stripe SDK and a STRIPE_API_KEY secret. This is a specific payment integration (payment gateway) rather than a generic API placeholder, so it exposes direct financial-execution capability.