sage-intacct

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow involves reading accounting records such as invoices and bills from Sage Intacct via Apideck, which can contain user-submitted or outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill integrates with Sage Intacct via Apideck's Accounting unified API to read, write, or reconcile invoices, bills, payments, ledger accounts, and journal entries. Invoices and bills represent indirect financial operations (creating bills/invoices and submitting billable usage for downstream handling). Although payments can be handled, the evaluation categorizes creating bills/invoices/reconciliations as indirect financial exposure. Vault authentication is used.