Expense Tracker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill processes external receipt images and expense details via OCR and chat feeds (like Slack), exposing the agent to untrusted text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill performs indirect financial operations by processing expense tracking, receipt processing, submitting reports, and managing reimbursement requests (SKILL.md:3, SKILL.md:36-37). Per evaluation guidelines, indirect financial operations (such as submitting reimbursements and billable usage for downstream handling) are assessed at the medium tier.