zoho-invoice

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow uses ClawLink to access Zoho Invoice via browser OAuth and then the agent reads Zoho Invoice data at runtime; that data is outsider-authored free text from a third-party SaaS (Zoho) that the operating user did not author, which can be ingested into the LLM context through the tool’s “read”/describe outputs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes "npx @useclawlink/cli" which fetches and executes remote npm code at runtime (see https://www.npmjs.com/package/@useclawlink/cli), so this external dependency can directly control agent behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is a dedicated integration for Zoho Invoice (an invoicing/billing app) via ClawLink that lets an agent "read and act on it" and execute specific Zoho Invoice actions (via the CLI run commands). That gives the agent authenticated, write-capable access to a financial application (create/send invoices, record payments, update billing records, etc.). Although the prompt doesn't enumerate every action, the integration is specifically designed to perform financial/invoicing operations and holds OAuth credentials to perform writes — i.e., it can directly execute financial-related transactions/operations rather than being a generic browser or HTTP tool.