exact-online

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow involves reading accounting records and invoices from Exact Online via Apideck, which contain user-generated commercial data and free-text invoices/bills from external suppliers/customers.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents access to Exact Online accounting via Apideck's unified API to read, write, and reconcile invoices, bills, and payments (direct/indirect financial operations). Access is controlled via OAuth 2.0 / Apideck Vault authentication.