QuickBooks Automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow processes receipt extraction and bank feeds where external vendors or third parties can input untrusted text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill automates accounting and invoicing workflows via QuickBooks integration, including invoice creation and recurring invoices (e.g., SKILL.md:111-143, SKILL.md:148-164). Creating invoices represents an indirect financial operation (creating bills/invoices for downstream handling) without direct payment execution or transfers. Per the evaluation rules, indirect financial operations evaluate to medium severity.