quickbooks
Warn
Audited by Snyk on Oct 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required workflow uses Apideck's Accounting API to read and write accounting data such as invoices and bills from QuickBooks, which can contain user-submitted or third-party free text.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill integrates with QuickBooks via Apideck's Accounting unified API to read, write, and reconcile invoices, bills, and payments. These operations create bills and invoices or submit financial data, representing indirect financial operations. Per guidelines, indirect financial operations are assessed at the medium tier.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata