alibabacloud-qianwenai-support

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent skill manages QianWen support tickets by reading existing tickets, viewing ticket histories, and listing messages where outsider-submitted support tickets and engineer replies are ingested into the runtime workflow.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill manages support tickets (create, list, view, reply, close, rate) on the QianWen support platform, which includes submitting support queries or billing/invoice issue descriptions. This constitutes indirect financial operations (creating support tickets/invoices/claims). Therefore, the financial-security exposure is medium.