chargebee-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill workflow involves reading webhook payloads from Chargebee, which can contain outsider-authored free text in customer and subscription metadata processed by the agent.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill integrates with the Chargebee billing platform, which explicitly manages subscriptions, payments, and invoices. Under the classification guidelines, payment gateways and billing operations platforms (like Stripe, Chargebee, PayPal) fall under Direct Financial Execution Authority (Risk 1) as they handle payment processing, invoices, and financial transactions.