zoho-books

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs runtime calls to the AgentPMT MCP endpoint (https://api.agentpmt.com/mcp/) to fetch live schema and get_instructions, which would return instructions/schema used to control the agent's prompts and behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). Yes. This skill is explicitly an accounting/financial tool (Zoho Books) and exposes actions and resources for payments and bank reconciliation: resources include customerpayments and vendorpayments, plus bankaccounts/banktransactions/bankstatements and actions such as create_record (which can create payment records), update_record/delete_record, invoice_email/invoice_mark_sent, and bank_match_transaction/bank_unmatch_transaction. Those are specific financial operations (creating/updating payment records and reconciling bank transactions) rather than generic tooling, so it grants direct financial execution authority.