commercetools-intake

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests outsider-authored emails, support tickets, and uploaded documents/files to process unstructured customer intake.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill provides instructions and references for integrating with the Composable Commerce Intake API to convert unstructured customer input (emails, PDFs, spreadsheets) into commerce entities such as Carts, Quote Requests, or Shopping Lists (SKILL.md:2-3). While it deals with commerce concepts (carts, quotes), the operation documented is creating preliminary commerce entities (Carts and Quote Requests) via an API agent, rather than performing a direct payment, charge, transfer, or settlement. Therefore, this is classified as an indirect financial operation (creating bills/invoices/purchase intents for downstream handling) or development/integration guidance. No direct funds movement or payment processing is executed by the skill itself.