schedule-meeting

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow connects to email and calendar services, which ingest external messages and scheduling requests that can contain outsider-authored text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill schedules meetings, drafts/sends emails, creates calendar events (which sends invites), and logs events to a CRM (SKILL.md:3, SKILL.md:74-79). This constitutes direct financial/operational actions (scheduling and booking meetings/invites), but no independent authentication or access control is documented or enforced by the skill for these execution routes beyond generic tool permissions.