account-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests outsider-authored free text from email and transcripts (lines 29-30, 49-51).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill builds strategic account plans, writes documents, and syncs summaries/next steps to a CRM. This involves indirect CRM field updates and document creation, constituting indirect financial scope (billable usage/crm updates). No direct financial operations (transfers, charges, purchases) are present.