connector-quickbooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill describes a QuickBooks connector that can read and query invoices, customers, and payments via API calls, which may contain outsider-authored text such as invoice descriptions or customer notes.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a QuickBooks integration that creates and manages invoices, customers, and payments (indirect financial operations, such as creating bills and invoices for downstream handling). Under Operation Type rules, creating real bills/invoices and posting payments is classified as an indirect financial operation, which falls under medium severity.