printify-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow interacts with the Printify API and processes webhooks from Printify, which can carry outsider-submitted storefront or order data (such as buyer personalization text or customer support requests).

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents direct operations for submitting orders and sending them to production via the Printify API (POST /v1/shops/{shop_id}/orders.json). These actions constitute direct financial operations (charges/purchases/settlement). Access control is established via Bearer token authentication (Authorization: Bearer {token} derived from a personal access token or OAuth token) enforced by the Printify service API.