paysera-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow includes handling PaySera webhooks by parsing the incoming HTTP request body (parseWebhookEvent(rawBody) / verifier.parse(req.rawBody)), which is outsider-authored free text from PaySera (an external party) that can be ingested into the agent/LLM context via the parsed event fields.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is a dedicated PaySera payment-gateway integration and explicitly exposes financial execution APIs and SDK methods: creating orders (POST /orders, paysera.orders.create), capturing payments (POST /payments/:id/capture, paysera.payments.capture), issuing refunds (POST /refunds, paysera.refunds.create), cancelling payments/orders, and OAuth2 token acquisition. It is specifically designed to move and manage money via a payment gateway, not a generic tool.