freeagent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow interacts with FreeAgent accounting data (such as contacts, invoices, and bills) which may contain user-entered or third-party business data fetched by the agent.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs execution of npm packages via npx from third-party registry links without a verifiable first-party publisher or immutable digest, presenting an unverifiable external runtime dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill provides integration with FreeAgent (Payments & Finance) through ClawLink, allowing the agent to manage invoices, bills, banking, and accounting transactions via specific actions like freeagent_create_invoice and freeagent_create_bill_with_attachment. This constitutes direct financial/accounting operations capability.