sesion-clinic-workflow-platform

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub clone URL points to a third‑party repository under an individual/unknown account (a common vector for distributing unvetted code), while the other links are to a public site and local development endpoints and are not direct download sources.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow ingests outsider-authored free text via WhatsApp messages (e.g., message.message?.conversation from external patients) into the backend, which is then available for the Claude AI integration to include in its LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly integrates payment gateways and invoicing APIs: the Architecture lists Stripe and Mercado Pago as payment providers, the environment variables include Stripe and Mercado Pago secret keys, and the AFIP billing service contains code that calls the AFIP electronic billing API (createVoucher) to generate official invoices. These are specific financial integrations (payment gateways / electronic invoicing) capable of initiating financial operations.