parallel-web-extract

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow extracts content from arbitrary URLs provided by the user via command-line arguments, which falls under the low-risk category for fetching specific outsider-authored content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation includes a reference to checking balance and adding funds via parallel-cli balance add <amount_cents> in the event of a 403 error. This functionality involves managing account balances and financial transactions, granting direct financial execution capability.