xapi

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The xapi skill exposes tool workflows that monitor and ingest untrusted external social feeds, posts, and comments from platforms like Twitter, Reddit, TikTok, Douyin, Weibo, and LinkedIn.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The provided skill documentation includes commands for topping up an account balance (npx xapi-to topup --method stripe --amount 10 and npx xapi-to topup --method x402) and managing financial operations or budgets directly through the xapi CLI tool. Specifically, the topup functionality interacts with payment gateways like Stripe to process financial transactions.