chapa-payments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow instructs the agent to implement webhook endpoints (such as in references/laravel.md and references/webhooks.md) that consume incoming POST requests containing outsider-authored free text in the payload body.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly provides instructions, endpoints, payloads, and examples for integrating the Chapa payment gateway (handling payments, checkouts, verification, split payments, refunds, and transfers). This constitutes direct financial execution capability as it covers payment processing APIs.