sales-creatorco

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests and acts on untrusted, user-generated creator data — e.g., London AI matching from "400M+ profiles", marketplace creator.space applications, creator-submitted UGC and Deep Insights reports described in SKILL.md — and the agent reads those profiles/reports to drive outreach, approvals, and campaign decisions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly documents platform payment capabilities: a "Digital wallet system — brands load funds, creators get paid on completion" and "Automated payment on deliverable approval." The campaign checklist also instructs to "Load digital wallet, set per-creator budget." These are specific, built-in payment/payout functions (i.e., moving money) rather than generic tools, so this constitutes direct financial execution authority.